Loading threats
Multipart form-data payload containing prototype pollution patterns (__proto__, constructor:constructor) combined with process.mainModule.require('child_process').execSync() invocation and NEXT_REDIRECT response manipulation. Indicative of targeted Next.js / Node.js server-side remote code execution exploitation attempts.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 130.12.180.55 | 89% | 44,580 | 44,580 | 🇳🇱 NL | AS202412 | 2026-03-14 |
| 192.42.116.213 | 98% | 1,631 | 188 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 192.42.116.208 | 99% | 1,327 | 155 | 🇳🇱 NL | AS215125 | 2026-02-22 |
| 84.200.128.149 | 88% | 1,292 | 593 | 🇩🇪 DE | AS214036 | 2026-02-18 |
| 192.42.116.209 | 98% | 1,165 | 135 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 64.89.161.198 | 88% | 1,126 | 602 | 🇬🇧 GB | AS205759 | 2026-02-23 |
| 192.42.116.217 | 96% | 1,118 | 124 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 45.84.107.17 | 93% | 797 | 192 | 🇸🇪 SE | AS214503 | 2026-04-20 |
| 45.84.107.33 | 89% | 752 | 195 | 🇸🇪 SE | AS214503 | 2026-04-20 |
| 45.84.107.172 | 96% | 735 | 216 | 🇸🇪 SE | AS214503 | 2026-04-20 |
| 176.65.139.30 | 75% | 640 | 223 | 🇩🇪 DE | AS51396 | 2026-02-26 |
| 45.156.87.70 | 84% | 398 | 397 | 🇳🇱 NL | AS51396 | 2026-03-23 |
| 111.90.150.233 | 76% | 378 | 366 | 🇲🇾 MY | AS45839 | 2026-03-15 |
| 103.120.189.68 | 65% | 341 | 192 | 🇮🇳 IN | AS137654 | 2026-04-20 |
| 20.193.146.159 | 78% | 328 | 187 | 🇮🇳 IN | AS8075 | 2026-04-18 |
| 57.159.30.22 | 62% | 312 | 173 | 🇮🇳 IN | AS8075 | 2026-04-20 |
| 185.220.100.254 | 93% | 297 | 60 | 🇩🇪 DE | AS205100 | 2026-04-18 |
| 64.82.206.195 | 66% | 286 | 135 | 🇺🇸 US | AS27419 | 2026-03-02 |
| 162.243.51.145 | 63% | 266 | 166 | 🇺🇸 US | AS14061 | 2026-04-15 |
| 64.82.206.194 | 62% | 256 | 124 | 🇺🇸 US | AS27419 | 2026-03-22 |