๐บ๐ธ
THP SecurityTeam
2025-01-14 19:07:00
(1 year ago)
Part of password spray attack starting on Dec 24, 2024. Continuing through 1/14/2025.
Hacking
Brute-Force
๐จ๐ฟ
lp
2025-01-13 16:20:54
(1 year ago)
Unauthorized VPN login attempts: 52 attempts were recorded from 38.180.6.254
2025-01-13T15:48:06+01: ...
show more
Unauthorized VPN login attempts: 52 attempts were recorded from 38.180.6.254
2025-01-13T15:48:06+01:00 vpn Access-Reject 'nahidul.bd.109' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-13T15:48:06+01:00 vpn Access-Reject 'mdnahidsheikhcom' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-13T15:48:06+01:00 vpn Access-Reject 'mdredwanmolla0' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-13T15:48:06+01:00 vpn Access-Reject 'nahidul.bd.108' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-13T15:48:06+01:00 vpn Access-Reject '32356267' station: 38.180.6.254 auth-type:
show less
Brute-Force
Web App Attack
Anonymous
2025-01-13 14:03:00
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-01-13 time=01:24:31 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1736753071453972482 tz="-0600" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=38.180.6.254 srccountry="Netherlands" user="cindymorgan" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
๐บ๐ธ
THP SecurityTeam
2025-01-13 13:57:00
(1 year ago)
pwd spray
Hacking
Web App Attack
๐จ๐ฟ
lp
2025-01-09 16:21:09
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-09T17:07:48+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-09T17:07:48+01:00 vpn Access-Reject 'tros01' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-09T17:07:58+01:00 vpn Access-Reject 'tros01' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-08 04:21:16
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2025-01-08T04:11:45+01:0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2025-01-08T04:11:45+01:00 vpn Access-Reject 'cadaovi' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-08T04:11:47+01:00 vpn Access-Reject 'Sangrit0' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-08T04:11:57+01:00 vpn Access-Reject '[email protected] ' station: 38.180.6.254 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-08T04:11:58+01:00 vpn Access-Reject 'Sangrit0' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-07 11:50:29
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-07T11:39:58+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-07T11:39:58+01:00 vpn Access-Reject 'fodp92' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-07T11:40:11+01:00 vpn Access-Reject 'fodp92' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-06 20:50:00
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-06T20:27:43+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-06T20:27:43+01:00 vpn Access-Reject 'root' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-06T20:27:56+01:00 vpn Access-Reject 'root' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
Anonymous
2025-01-06 20:41:47
(1 year ago)
Port Scan
๐จ๐ฆ
wil.com
2025-01-05 18:13:29
(1 year ago)
GlobalProtect login attempts with user cisco.
VPN IP
Brute-Force
๐จ๐ฟ
lp
2025-01-04 23:49:53
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2025-01-05T00:05:10+01:0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2025-01-05T00:05:10+01:00 vpn Access-Reject 'xneul08' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-05T00:05:12+01:00 vpn Access-Reject 'xslal18' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-05T00:05:19+01:00 vpn Access-Reject 'xneul08' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-05T00:05:21+01:00 vpn Access-Reject 'xslal18' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-03 16:20:45
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-03T16:48:26+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-03T16:48:26+01:00 vpn Access-Reject 'volm08' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-03T16:48:37+01:00 vpn Access-Reject 'volm08' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-02 07:21:10
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-02T07:10:29+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 38.180.6.254
2025-01-02T07:10:29+01:00 vpn Access-Reject 'forl02' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-02T07:10:40+01:00 vpn Access-Reject 'forl02' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2025-01-01 17:49:37
(1 year ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 38.180.6.254
2025-01-01T18:20:13+01:0 ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 38.180.6.254
2025-01-01T18:20:13+01:00 vpn Access-Reject '2002mikel' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-01T18:20:16+01:00 vpn Access-Reject 'hovs00' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-01T18:20:16+01:00 vpn Access-Reject '2002mikel' station: 38.180.6.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-01T18:20:32+01:00 vpn Access-Reject '[email protected] ' station: 38.180.6.254 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-01-01T18:20:36+01:00 vpn Access-Reject 'hovs00' station: 38.180.6.254 auth-type: - realm: vse.cz n
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2024-12-31 23:49:55
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2024-12-31T23:28:57+01:0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 38.180.6.254
2024-12-31T23:28:57+01:00 vpn Access-Reject 'morv00' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2024-12-31T23:28:57+01:00 vpn Access-Reject 'dvoracek' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>'
2024-12-31T23:29:09+01:00 vpn Access-Reject 'morv00' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2024-12-31T23:29:09+01:00 vpn Access-Reject 'dvoracek' station: 38.180.6.254 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>'
show less
Brute-Force
Web App Attack