{"ip":"94.154.43.222","first_seen":"2026-09-25T23:57:55.538Z","last_seen":"2026-09-29T05:41:50.038Z","geo":{"country":"The Netherlands","country_code":"NL","city":"Amsterdam","asn":"AS219502 Storm Industries LLC","isp":"Storm Industries LLC","lat":52.3716,"lon":4.8883},"stats":{"total_events":11,"ssh_events":0,"http_events":11,"ssh_failures":0,"http_4xx":11,"http_5xx":0,"distinct_usernames":0,"distinct_paths":7,"distinct_source_hosts":3},"behavior_tags":["actor.multi_vm","asn.coordinated","subnet.coordinated"],"event_tags":["client.outdated","probe.cgi","protocol.no-accept","protocol.no-language","protocol.old"],"recent_events":[{"ts":"2026-09-29T05:41:50.038Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;echo%20%24((724691%2B200815));%27","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-29T05:41:48.717Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;expr%20429767%20%2B%20319890;%27","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-29T05:02:48.236Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;echo%20%24((480199%2B706266));%27","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-29T05:02:47.491Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;expr%20768941%20%2B%20871770;%27","status":404,"host_app":"54.144.12.123","source_host":"aws-use1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-28T21:34:28.244Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;echo%20%24((917704%2B117523));%27","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-28T21:34:28.23Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/cgi-bin/account_mgr.cgi?cmd=cgi_user_add\u0026name=%27;expr%20956157%20%2B%20516420;%27","status":404,"host_app":"18.196.101.57","source_host":"aws-euc1","tags":["protocol.old","protocol.no-accept","protocol.no-language","probe.cgi"]},{"ts":"2026-09-27T08:20:39.368Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/webui/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["client.outdated","protocol.no-language"]},{"ts":"2026-09-27T07:47:26.868Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/webui/","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.outdated","protocol.no-language"]},{"ts":"2026-09-26T07:06:14.744Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/webui/","status":404,"host_app":"18.142.115.158:80","source_host":"aws-apse1","tags":["client.outdated","protocol.no-language"]},{"ts":"2026-09-26T07:00:22.68Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/webui/","status":404,"host_app":"54.144.12.123:80","source_host":"aws-use1","tags":["client.outdated","protocol.no-language"]},{"ts":"2026-09-25T23:57:55.538Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/webui/","status":404,"host_app":"18.196.101.57:80","source_host":"aws-euc1","tags":["client.outdated","protocol.no-language"]},{"ts":"2026-09-17T00:57:06.677Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/","status":404,"host_app":"18.142.115.158","source_host":"aws-apse1","tags":["client.empty-ua","protocol.old","protocol.no-accept","protocol.no-language"]}],"generated_at":"2026-10-25T02:28:11.11236819Z"}