fromThe Hacker News
1 week ago251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
These IPs triggered 75 distinct behaviors, including CVE exploits, misconfiguration probes, and recon activity, indicating temporary infrastructure rental for a single operation.
Roam Research