+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: 83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure (/showthread.php?tid=6320262)
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure - Stanley - Feb 21, 2026
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure
A significant chunk of the exploitation attempts targeting a newly disclosed security flaw in Ivanti Endpoint Manager Mobile (EPMM) can be traced back to a single IP address on bulletproof hosting infrastructure offered by PROSPERO.
Threat intelligence firm GreyNoise said it recorded 417 exploitation sessions from 8 unique source IP addresses between February 1 and 9, 2026. An estimated 346
https://thehackernews.com/2026/02/83-of-ivanti-epmm-exploits-linked-to.html
RE: 83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure - Moooookie - Feb 21, 2026
That’s crazy that most of it traces back to one ip.. just shows how organized some of these attackers really are.