Loading threats
Multipart form-data payload containing prototype pollution patterns (__proto__, constructor:constructor) combined with process.mainModule.require('child_process').execSync() invocation and NEXT_REDIRECT response manipulation. Indicative of targeted Next.js / Node.js server-side remote code execution exploitation attempts.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 79.124.40.174 | 100% | 86,168 | 72,858 | 🇧🇬 BG | AS50360 | 2026-03-02 |
| 67.213.118.179 | 88% | 2,283 | 1,941 | 🇺🇸 US | AS396356 | 2026-03-01 |
| 192.42.116.213 | 98% | 1,631 | 188 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 192.42.116.208 | 99% | 1,327 | 155 | 🇳🇱 NL | AS215125 | 2026-02-22 |
| 84.200.128.149 | 88% | 1,292 | 593 | 🇩🇪 DE | AS214036 | 2026-02-18 |
| 192.42.116.209 | 98% | 1,165 | 135 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 64.89.161.198 | 88% | 1,126 | 602 | 🇬🇧 GB | AS205759 | 2026-02-23 |
| 192.42.116.217 | 96% | 1,118 | 124 | 🇳🇱 NL | AS215125 | 2026-02-20 |
| 45.84.107.17 | 93% | 706 | 101 | 🇸🇪 SE | AS214503 | 2026-03-02 |
| 45.84.107.33 | 90% | 642 | 85 | 🇸🇪 SE | AS214503 | 2026-03-02 |
| 176.65.139.30 | 75% | 640 | 223 | 🇩🇪 DE | AS51396 | 2026-02-26 |
| 45.84.107.172 | 97% | 627 | 108 | 🇸🇪 SE | AS214503 | 2026-03-02 |
| 176.65.139.7 | 84% | 489 | 191 | 🇩🇪 DE | AS51396 | 2026-02-03 |
| 64.82.206.195 | 66% | 284 | 133 | 🇺🇸 US | AS27419 | 2026-03-02 |
| 185.220.100.254 | 93% | 271 | 34 | 🇩🇪 DE | AS205100 | 2026-03-02 |
| 103.120.189.68 | 68% | 267 | 118 | 🇮🇳 IN | AS137654 | 2026-02-28 |
| 57.159.30.22 | 65% | 262 | 123 | 🇮🇳 IN | AS8075 | 2026-03-02 |
| 111.90.150.233 | 97% | 254 | 244 | 🇲🇾 MY | AS45839 | 2026-03-01 |
| 64.82.206.194 | 65% | 251 | 119 | 🇺🇸 US | AS27419 | 2026-03-02 |
| 20.193.146.159 | 67% | 244 | 103 | 🇮🇳 IN | AS8075 | 2026-03-02 |