hxxp://192.168.1[.]100:8080/cmd.php?cmd=whoamiURL

Reported by 1 independent source · first reported 27 Jan 2025 by Elastic Security Labs · last reported 27 Jan 2025

Last reported 20 months ago

What the reports say

1 report, newest first · the exact sentence from each

“> curl hxxp://192.168.1[.]100:8080/cmd.php?cmd=whoami”

Elastic Security LabsVendor27 Jan 2025
Linux Detection Engineering - A Continuation on Persistence Mechanisms

named in the same reports

Copy this indicator · defanged

1 indicator, defanged, one per line

hxxp://192.168.1[.]100:8080/cgi-bin/reverse.py

Thanks — we review every report.

Report a wrong value