{"ip":"94.183.174.100","data_as_of":"2026-10-26T00:40:52+00:00","observed":true,"total_events":114,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"1 exploit-path probe(s)","confidence":"medium","network_type":"network services","why":["1 request(s) matched a known exploit path.","Only GET and HEAD requests were seen, with no body, which reads as a check for the vulnerability without a payload.","Not in any known-scanner range.","Counts include 208 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"34,658 bytes sent","bytes_sent":34658,"session_seconds":40,"persistent":false},"basis":"combined"},"first_seen":"2026-10-17T18:00:45","last_seen":"2026-10-25T21:07:18","events_24h":16,"events_7d":101,"interactive_sessions":208,"interactive_sessions_24h":25,"interactive_sessions_7d":182,"interactive_protocols":[{"protocol":"http","sessions":126},{"protocol":"kerberos","sessions":4},{"protocol":"telnet","sessions":2},{"protocol":"sccp","sessions":2},{"protocol":"snmp","sessions":2},{"protocol":"pop3","sessions":1},{"protocol":"sunrpc","sessions":1},{"protocol":"dvrip","sessions":1}],"geo":{"country_code":"AE","country_name":"United Arab Emirates","region":"","city":"","lat":23.75,"lon":54.5,"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)"},"source_domain":"94.183.174.100.ptr.pfcloud.network","known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2024-30569","title":"Netgear R6850 - Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/currentsetting.htm","kev_date_added":null}],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":208,"first_seen":"2026-10-17T18:25:49","last_seen":"2026-10-25T21:05:57","verdicts":[{"verdict":"unknown","sessions":143},{"verdict":"scan","sessions":65}],"personas":[{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dir645@1.03, fortigate@7.2.1","sessions":47},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":23},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, docker@25.0.3","sessions":20},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":13},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dir645@1.03, fortigate@7.2.1, gitlab@19.4.2","sessions":7},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, mikrotik@6.49.10, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":5},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, dlink-dns@1.10, fortigate@7.2.1","sessions":5},{"persona":"kerberos@Windows Server 2019","sessions":4},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, mikrotik@6.49.10, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":2},{"persona":"snmp@net-snmp 5.8","sessions":2},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2","sessions":2}],"services":[{"protocol":"http","port":80,"sessions":27},{"protocol":"http","port":443,"sessions":23},{"protocol":"http","port":8080,"sessions":22},{"protocol":"http","port":8443,"sessions":13},{"protocol":"tcp","port":2588,"sessions":9},{"protocol":"http","port":81,"sessions":7},{"protocol":"http","port":8081,"sessions":7},{"protocol":"tcp","port":85,"sessions":6},{"protocol":"http","port":5000,"sessions":5},{"protocol":"tcp","port":82,"sessions":5},{"protocol":"tcp","port":8000,"sessions":4},{"protocol":"kerberos","port":88,"sessions":4}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":65}]},"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":17,"sessions":23},{"port":80,"proto":"tcp","label":"HTTP","count":0,"sessions":27},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":0,"sessions":22},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":8,"sessions":13},{"port":81,"proto":"tcp","label":"","count":7,"sessions":7},{"port":85,"proto":"tcp","label":"","count":6,"sessions":6},{"port":5000,"proto":"tcp","label":"Web-alt","count":5,"sessions":5},{"port":82,"proto":"tcp","label":"","count":5,"sessions":5},{"port":2588,"proto":"tcp","label":"","count":0,"sessions":9},{"port":90,"proto":"tcp","label":"","count":4,"sessions":3},{"port":8088,"proto":"tcp","label":"Hadoop","count":4,"sessions":3},{"port":8081,"proto":"tcp","label":"HTTP","count":0,"sessions":7},{"port":34567,"proto":"tcp","label":"","count":5,"sessions":1},{"port":50080,"proto":"tcp","label":"","count":2,"sessions":2},{"port":106,"proto":"tcp","label":"","count":2,"sessions":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb","t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_client_hello":"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","tls_ja3":["416eca07dcaad72dec6f76d1277b3eff","11a384388ad36777e1a2e121495037fe","2196848d251b217de8b2c037e356c11d"],"http_akin":["b11cun030_00040011_c91eaf54","b11cun020_00040001_78f1f19c","b11cun030_00040014_54d07b6d","b11cun040_00040013_7df024fe"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_f50d94e863eb","t13i251000_b78ed14e2fd0_f50d94e863eb"],"tls_ja3":["11a384388ad36777e1a2e121495037fe","2196848d251b217de8b2c037e356c11d","416eca07dcaad72dec6f76d1277b3eff"]}},"fingerprint_peers":{"b11cun020_00040001_78f1f19c":39,"b11cun030_00040014_54d07b6d":3809,"t13i131000_f57a46bbacb6_f50d94e863eb":2804,"t13i251000_b78ed14e2fd0_f50d94e863eb":39,"b11cun030_00040011_c91eaf54":972,"b11cun040_00040013_7df024fe":5},"akin_families":{"b11cun030_00040011_c91eaf54":{"head":"b11cun030_00040011_c91eaf54","shapes":5,"ips":973},"b11cun020_00040001_78f1f19c":{"head":"b11cun020_00040001_78f1f19c","shapes":4,"ips":39},"b11cun040_00040013_7df024fe":{"head":"b11cun030_00040011_213543bf","shapes":2,"ips":20}},"user_agents":["Hello World/1.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","Mozilla/5.0","python-requests/2.31.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.36","Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-10-17","count":3,"sessions":6},{"date":"2026-10-18","count":10,"sessions":20},{"date":"2026-10-19","count":2,"sessions":1},{"date":"2026-10-20","count":25,"sessions":38},{"date":"2026-10-21","count":46,"sessions":95},{"date":"2026-10-22","count":8,"sessions":9},{"date":"2026-10-23","count":2,"sessions":7},{"date":"2026-10-24","count":2,"sessions":7},{"date":"2026-10-25","count":16,"sessions":25}],"recent_events":[{"timestamp":"2026-10-25T21:07:18","port":86,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:86\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"177afa4d-9510-446f-85ec-dd118a46a5bf","seq":1,"duration_ms":101,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T21:05:54","port":86,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:86\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"5b756454-1f48-410f-b67e-bc304758039e-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-25T20:45:03","port":84,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:84\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"13faf100-c4da-4d6a-b54e-2c628870b87f","seq":1,"duration_ms":100,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T20:18:19","port":85,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:85\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>3a38350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39302e302e343433302e3835205361666172692f3533372e3336204564672f39302e302e3831382e34360d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a582d5265717565737465642d576974683a20584d4c48747470526571756573740d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465643b20636861727365743d5554462d380d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570742d4c616e67756167653a20656e2055532c656e3b713d302e392c73763b713d302e380d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"c7043ab1-c6d5-4c2f-9f79-60fdaeae2e1d","seq":1,"duration_ms":100,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T19:28:40","port":83,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:83\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"d32f767c-aed9-4da3-ad04-12b844ef1d70","seq":1,"duration_ms":100,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T18:43:48","port":106,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:106\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"ec998952-4ee6-42a6-9938-9a924832fd3a","seq":1,"duration_ms":100,"bytes_in":441,"bytes_out":79},{"timestamp":"2026-10-25T17:27:21","port":82,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:82\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"4db7b315-17a4-4d7c-ac62-a9189d467086","seq":1,"duration_ms":100,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T16:42:57","port":81,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, gzip, deflate\",\"accept-language\":\"en US,en;q=0.9,sv;q=0.8\",\"connection\":\"keep-alive\",\"content-type\":\"application/x-www-form-urlencoded; charset=UTF-8\",\"host\":\"<HONEYPOT>:81\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46\",\"x-requested-with\":\"XMLHttpRequest\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/dispatch.asp","summary":"","payload_hex":"474554202f64697370617463682e61737020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","ja3":"","session":"90a116c3-1be0-4a7c-8cc9-8f1f3c7340b4","seq":1,"duration_ms":100,"bytes_in":440,"bytes_out":79},{"timestamp":"2026-10-25T14:22:44","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:8088\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"1248364a-5262-4da2-b67f-5acb7a368e91","seq":1,"duration_ms":100,"bytes_in":64,"bytes_out":79},{"timestamp":"2026-10-25T13:54:09","port":82,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>:82\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38320d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"de3cacdb-d9fe-4cae-8ffd-3c4bced717e0","seq":1,"duration_ms":100,"bytes_in":62,"bytes_out":79}],"http_methods":[{"method":"GET","count":155},{"method":"PROPFIND","count":10}],"distinct_ports_total":65,"top_paths":[{"path":"/","count":111,"ports":29},{"path":"/dispatch.asp","count":34,"ports":18},{"path":"/currentsetting.htm","count":12,"ports":4},{"path":"/cgi-bin/luci/;stok=/locale","count":8,"ports":6}],"distinct_paths_total":4,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Connection","Content-Type","Host","User-Agent","X-Requested-With"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, gzip, deflate","notable":false},{"name":"Accept-Language","value":"en US,en;q=0.9,sv;q=0.8","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Content-Type","value":"application/x-www-form-urlencoded; charset=UTF-8","notable":true},{"name":"Host","value":"<HONEYPOT>:86","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46","notable":false},{"name":"X-Requested-With","value":"XMLHttpRequest","notable":true}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-30569","tag_type":"cve","title":"Netgear R6850 - Information Disclosure","severity":"high","actively_exploited":false,"match_field":"url_path","matched_pattern":"/currentsetting.htm","reference_urls":["https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Info%20Leak%20in%20Netgear-R6850%EF%BC%88currentsetting.htm%EF%BC%89.md","https://nvd.nist.gov/vuln/detail/CVE-2024-30569","https://www.netgear.com/about/security/"],"kev_date_added":null}]}