Http Path Gponform Diag Form Access

HTTP request targeting /GponForm/diag_Form, a known diagnostic endpoint exposed by GPON routers and similar IoT devices. Commonly abused in remote command injection exploitation attempts.

Observed IPs

384

Avg Confidence

49%

Protocol

HTTP

Top IPs by event count

IP Address	Risk	Events	Sessions	Country	ASN	Last Seen
103.93.93.182	100%	89,384	3,913	🇮🇩 ID	AS141140	2026-03-02
223.123.38.33	100%	23,777	904	🇵🇰 PK	AS138423	2026-03-02
223.123.43.5	100%	22,905	1,051	🇵🇰 PK	AS138423	2026-03-02
223.123.38.35	100%	21,545	971	🇵🇰 PK	AS138423	2026-03-02
223.123.43.71	100%	19,630	930	🇵🇰 PK	AS138423	2026-03-02
223.123.38.39	100%	12,645	1,243	🇵🇰 PK	AS138423	2026-03-02
223.123.43.4	100%	9,357	445	🇵🇰 PK	AS138423	2026-03-02
66.167.169.173	100%	7,579	286	🇵🇰 PK	AS9541	2026-03-01
139.135.43.217	92%	5,567	122	🇵🇰 PK	AS9541	2026-02-17
66.167.166.8	91%	5,244	116	🇵🇰 PK	AS9541	2026-02-06
105.114.21.250	100%	4,473	868	🇳🇬 NG	AS36873	2026-03-02
14.1.106.116	97%	4,377	102	🇵🇰 PK	AS9541	2026-03-01
103.26.82.244	90%	3,407	75	🇵🇰 PK	AS9541	2026-02-11
175.107.211.60	98%	3,276	79	🇵🇰 PK	AS9541	2026-02-15
110.39.237.192	92%	3,177	70	🇵🇰 PK	AS38264	2026-02-05
66.167.166.175	100%	3,038	111	🇵🇰 PK	AS9541	2026-03-02
66.167.166.176	100%	2,644	124	🇵🇰 PK	AS9541	2026-02-27
103.206.100.132	96%	2,625	58	🇮🇳 IN	AS137120	2026-02-06
66.167.166.138	92%	2,442	55	🇵🇰 PK	AS9541	2026-02-10
139.135.42.150	100%	2,426	127	🇵🇰 PK	AS9541	2026-02-28