Back to evidence

Sanitized live incident

Attempted exploitation

Native source identity and targetable endpoints are private.

highopen
Confidence
92%
First seen
Sep 25, 5:33:30 PM PDT
Evidence through
Sep 25, 6:32:46 PM PDT
AI status
Pending
AI investigation is Pending

Deterministic signals remain live while the bounded assessment completes.

Observed impact

    Deterministic signals

    Http.surface enumeration92%

    Broad unauthenticated route and HTTP method enumeration observed

    450 observations · 1 http
    Http.command injection attempt88%

    Request contains shell metacharacters and command tokens

    2 observations · 2 http