Back to evidence

Sanitized live incident

Attempted exploitation

Native source identity and targetable endpoints are private.

highopen
Confidence
96%
First seen
Sep 17, 10:37:01 AM PDT
Evidence through
Sep 17, 10:37:01 AM PDT
AI status
Pending
AI investigation is Pending

Deterministic signals remain live while the bounded assessment completes.

Observed impact

    Deterministic signals

    Http.php webshell enumeration96%

    Rapid enumeration of PHP and WordPress web-shell paths

    26 observations · 12 http
    Http.command injection attempt88%

    Request contains shell metacharacters and command tokens

    1 observations · 1 http