poc/2026.09.25
First seen September 26, 2026 · Last seen October 14, 2026
poc/2026.09.25
[[TODO: MAP ONE SENTENCE SUMMARY]]
Category: [[TODO: MAP CATEGORY]]
Avg 1.3 req/min
Seen on 7 systems
10 observed requests
2 exact variants
First seen September 23, 2026
Last seen October 14, 2026
[[TODO: MAP INTRODUCTION PARAGRAPH 1]]
[[TODO: MAP INTRODUCTION PARAGRAPH 2]]
What is poc/2026.09.25?
[[TODO: MAP DEFINITION SUMMARY]]
[[TODO: MAP SHORT REFERENCE SUMMARY]]
Analyst summary: [[TODO: MAP ANALYST REPORT SUMMARY]]
User-agent
poc/2026.09.25
Observed source IPs
0
Observed requests
10
Source networks
9
Exact variants
2
Latest hit count
30
Latest miss count
0
Latest 404 count
0
Unique paths
3
Related campaigns
[[TODO: MAP RELATED CAMPAIGN COUNT]]
Observed exact user-agent strings
poc/2026.09.22
First seen September 23, 2026 · Last seen September 30, 2026
Behavior profile
[[TODO: MAP BEHAVIOR PROFILE INTRO]]
Category
[[TODO: MAP CATEGORY]]
Average request rate
1.3 requests per minute
HTTP and HTTPS support
[[TODO: MAP HTTP HTTPS SUPPORT]]
HTTP version support
[[TODO: MAP PROTOCOL SUPPORT SUMMARY]]
Redirect behavior
[[TODO: MAP REDIRECT BEHAVIOR]]
Robots.txt behavior
[[TODO: MAP ROBOTS TXT BEHAVIOR]]
Crawl-rate behavior
[[TODO: MAP CRAWL RATE BEHAVIOR]]
JavaScript execution
[[TODO: MAP JAVASCRIPT SUPPORT]]
Form submission activity
[[TODO: MAP FORM SUBMISSION ACTIVITY]]
Malformed URL requests
[[TODO: MAP MALFORMED URL BEHAVIOR]]
HTTP/1.0: [[TODO: MAP HTTP 1.0 SUPPORT]]
HTTP/1.1: [[TODO: MAP HTTP 1.1 SUPPORT]]
HTTP/2: [[TODO: MAP HTTP 2 SUPPORT]]
HTTP/3: [[TODO: MAP HTTP 3 SUPPORT]]
[[TODO: MAP HEADER ORDER FINGERPRINTED]]
Source distribution
[[TODO: MAP SOURCE DISTRIBUTION INTRO]]
Top countries
| Country | Networks | Site sightings | Share |
|---|---|---|---|
| Indonesia | 3 | 3 | 30.0% |
| United States | 1 | 1 | 20.0% |
| Singapore | 1 | 1 | 10.0% |
| Spain | 1 | 1 | 10.0% |
| Brazil | 1 | 1 | 10.0% |
| United Kingdom | 1 | 1 | 10.0% |
| United Arab Emirates | 1 | 1 | 10.0% |
Top ASNs
| ASN | Organization | Networks | Share |
|---|---|---|---|
| AS7713 | [[TODO: MAP ASN ORGANIZATION]] | 2 | 20.0% |
| AS14061 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 20.0% |
| AS141995 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
| AS15704 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
| AS52558 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
| AS214481 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
| AS209373 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
| AS152440 | [[TODO: MAP ASN ORGANIZATION]] | 1 | 10.0% |
Top datacenters
| Provider | Type | Snapshots | Share |
|---|
Representative source IPs
[[TODO: MAP REPRESENTATIVE IPS INTRO]]
HTTP fingerprint and request characteristics
[[TODO: MAP HTTP FINGERPRINT INTRO]]
Observed header order
[[TODO: MAP HTTP HEADER ORDER SUMMARY]]
Common headers sent
[[TODO: MAP COMMON HEADERS SUMMARY]]
TLS and HTTPS behavior
[[TODO: MAP TLS HTTPS SUMMARY]]
URL normalization behavior
[[TODO: MAP URL NORMALIZATION SUMMARY]]
Malformed request patterns
[[TODO: MAP MALFORMED REQUEST SUMMARY]]
[[TODO: MAP OBSERVED HTTP HEADERS]]
Observed sample requests
[[TODO: MAP SAMPLE REQUESTS INTRO]]
/?rest_route=%2Fwp%2Fv2%2Fpages&per_page=100&_fields=id%2Cslug%2Clink%2Ctemplate
/wp-content/themes/Newspaper/page-templates/
/
Related campaigns and associations
[[TODO: MAP RELATED CAMPAIGNS INTRO]]
[[TODO: MAP RELATED CAMPAIGN NAME]]
Detailed analyst report
[[TODO: MAP ANALYST REPORT PARAGRAPH 1]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 2]]
[[TODO: MAP ANALYST REPORT PARAGRAPH 3]]
Frequently asked questions about poc/2026.09.25
What is poc/2026.09.25?
[[TODO: MAP FAQ WHAT IS ANSWER]]
Is poc/2026.09.25 considered malicious?
[[TODO: MAP FAQ MALICIOUS ANSWER]]
Does poc/2026.09.25 respect robots.txt and crawl-rate controls?
[[TODO: MAP FAQ ROBOTS ANSWER]]
What infrastructure is commonly associated with poc/2026.09.25?
[[TODO: MAP FAQ INFRASTRUCTURE ANSWER]]