[mlacks]

It appears to be from the mongo db exploit. Sort of like Heartbleed from a few years ago.

https://github.com/joe-desimone/mongobleed

https://beta.shodan.io/host/212.104.194.153