This IP was observed targeting a Joomla web application's file-upload endpoint (`/index.php?option=c ...
show moreThis IP was observed targeting a Joomla web application's file-upload endpoint (`/index.php?option=com_baforms&task=form.uploadAttachmentFile`). Repeated HTTP POST requests from 147.93.172.82, identified via X-Forwarded-For headers, returned HTTP 200 responses and closely correlated with AV static web-shell detections.
show less
This IP was identified by Microsoft as attacker infrastructure associated with high-confidence passw ...
show moreThis IP was identified by Microsoft as attacker infrastructure associated with high-confidence password-spray activity and was observed with a compromised Microsoft 365 account.
show less
Malicious IP was observed targeting a Laravel Livewire applications. Repeated POST requests from thi ...
show moreMalicious IP was observed targeting a Laravel Livewire applications. Repeated POST requests from this IP to `/livewire/update` closely correlated with unauthorized `php-cgi.exe` command execution, application reconnaissance, credential discovery attempts, and attempted web-shell deployment. Additional requests targeted Laravel environment files and debugging endpoints.
show less
Malicious IP was observed targeting a vulnerable Laravel Livewire application. Repeated POST request ...
show moreMalicious IP was observed targeting a vulnerable Laravel Livewire application. Repeated POST requests from this IP correlated with unauthorized php-fpm command execution, system reconnaissance, PostgreSQL enumeration, and attempts to access sensitive credentials and key material.
show less
Web App AttackHacking
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.