SSL VPN BruteForce
353 reported attempts using unique usernames seen from 1-JAN-2024
Example usern ...
show moreSSL VPN BruteForce
353 reported attempts using unique usernames seen from 1-JAN-2024
Example usernames seen:-
user="bao"
user="bannon"
user="banking"
user="banjoman"
user="banging"
user="bangbang"
user="bandog"
user="bandido"
user="bandar"
user="banchee"
show less
Brute-Force
Anonymous
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show moreMessage meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2024-01-19 time=10:14:28 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=185.231.207.97 user="ashly" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
Anonymous
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show moreMessage meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2024-01-19 time=07:21:45 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=185.231.207.97 user="asdsd" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
Anonymous
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show moreMessage meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2024-01-12 time=14:21:56 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101039426 type=event subtype=vpn level=alert vd=root logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=185.231.207.97 user="hendri.bustan" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ