CVE-2018-11776 Attacker hosts for 2026-10-19
Oct 19, 2026
Exploitation
Last Updated: 00:00 UTC
CVE-2018-11776 exploitation attempts observed at the reverse proxy.
CVE References
Observed URIs
/index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%2.../login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%2.../index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b.../index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).star.../login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b...
Attackers by Country
| United States of America | 4 | 50.0% |
| Sweden | 3 | 37.5% |
| Portugal | 1 | 12.5% |
IP Address : ASN : City/Provider
-
143.198.52.102 : AS14061 digitalocean llc : Santa Clara
-
185.196.9.61 : AS42624 simple carrier llc : United States of America
-
185.205.246.47 : AS51167 contabo gmbh : Overland Park
-
192.142.226.23 : AS212238 datacamp limited : Lisbon
-
198.167.197.162 : AS39287 ab stract : Sweden
-
198.167.197.194 : AS39287 ab stract : Sweden
-
198.167.197.204 : AS39287 ab stract : Sweden
-
20.160.30.226 : AS8075 microsoft corporation : United States of America