Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-17
Excerpt
Overview Between January 10, 2026 06:10 UTC and January 17, 2026 04:59 UTC, GreyNoise sensors recorded 8,126 HTTP sessions from 34 unique IP addresses containing Well-known Out-of-band Interaction Domain callbacks. The activity exhibits characteristics of automated vulnerability scanning, with payloads targeting React Server Components, Supervisord XML-RPC interfaces, and router command injection vulnerabilities. OAST domain extraction and decoding identified 273 Interactsh…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2017-11610 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-46982 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…