{"cve_id":"CVE-2023-23752","title":"Joomla! Webservice - Password Disclosure","severity":"medium","actively_exploited":true,"patterns":["/api/v1/config/application","/api/index.php/v1/config/application"],"events":21,"unique_ips":4,"actors":[{"ip":"130.12.180.77","events":17,"country_code":"NL","country":"The Netherlands","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"185.177.72.24","events":2,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.17","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"147.139.178.214","events":1,"country_code":"ID","country":"Indonesia","org":"Alibaba (US) Technology Co., Ltd.","rdns":"","scanner_tag":null}],"top_asns":[{"asn":202412,"org":"Omegatech LTD","events":17,"ips":1},{"asn":211590,"org":"Bucklog SARL","events":3,"ips":2},{"asn":45102,"org":"Alibaba (US) Technology Co., Ltd.","events":1,"ips":1}],"fingerprints":{"ja4h":["ge11nn0200_fdb5000be5f4","ge11nn0300_042112399351","ge11nn14en_068ebe3632ec"],"ja4":["t13i131200_f57a46bbacb6_1bd98dace775","t13i3111h2_e8f1e7e78f70_8d633dac7124"]},"sample_paths":["/api/v1/config/application/public/","/api/v1/config/application?public=true","/api/index.php/v1/config/application"],"timeline":[{"day":"2026-07-01","events":4,"ips":1},{"day":"2026-07-02","events":3,"ips":1},{"day":"2026-07-03","events":8,"ips":1},{"day":"2026-07-04","events":2,"ips":1},{"day":"2026-07-05","events":3,"ips":2},{"day":"2026-07-06","events":1,"ips":1}],"window_hours":168}