GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-17
ID: a04f8ce8-7b08-5953-bae0-927c9973d69c
STIX ID: report--a04f8ce8-7b08-5953-bae0-927c9973d69c
Feed Name: GreyNoise Labs
Between 2026-01-10 and 2026-01-17 GreyNoise sensors observed 8,126 HTTP sessions from 34 IPs conducting automated vulnerability scanning and exploitation attempts (primary burst from 146.70.211.244/AS9009) targeting React Server Components RCE (CVE-2024-46982), Supervisord XML-RPC RCE (CVE-2017-11610), and router/IoT command injections; the report provides campaign clustering, JA4/TCP fingerprinting, 273 Interactsh OAST domains, primary IOCs, and concrete detection and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
