Botnet of Infected WordPress Sites Attacking WordPress Sites
Tags
country: Netherlands Romania Russia
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Brute Force - T1110 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID dffef9fe-6192-429b-bd56-a0f658338ab3
Fingerprint a1b18a139861660a
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 5, 2018, 11:04 p.m.
Added to db Jan. 19, 2023, 12:02 a.m.
Last updated Nov. 19, 2024, 9:51 p.m.
Headline Botnet of Infected WordPress Sites Attacking WordPress Sites
Title Botnet of Infected WordPress Sites Attacking WordPress Sites
Detected Hints/Tags/Attributes 54/2/6
Source URLs
Redirection Url
Details Source https://www.wordfence.com/blog/2018/12/wordpress-botnet-attacking-wordpress/
URL Provider
Details Provider Source level domain
Details wordfence.com www.wordfence.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
best-proxies.ru
Details Domain 838 
example.com
Details Domain 1 
api.best-proxies.ru
Details File 35 
xmlrpc.php
Details File 1 
class-wp-xmlrpc-server.php
Details File 2 
proxy.txt