Unsolicited TCP connection from external IP 175.107.224.149 to external‑facing address 202.122.152.9 ...
show moreUnsolicited TCP connection from external IP 175.107.224.149 to external‑facing address 202.122.152.91 using a high, non‑standard destination port. Connection was logged as a state‑bypass session by the firewall, indicating non‑application traffic consistent with automated probing or port scanning activity.
show less
Unsolicited inbound TCP connection from external IP 186.101.212.198 (Ecuador) targeting MySQL servic ...
show moreUnsolicited inbound TCP connection from external IP 186.101.212.198 (Ecuador) targeting MySQL service on port 3306. Traffic originated from the WAN and attempted to access an internal LAN host. Activity is consistent with automated MySQL brute‑force or unauthorized access attempts. Session was closed by the firewall.
show less
HTTP GET request from external IP 178.239.163.104 targeting /wp-includes/assets/index.php, a path co ...
show moreHTTP GET request from external IP 178.239.163.104 targeting /wp-includes/assets/index.php, a path commonly associated with WordPress exploitation attempts. Request triggered very high WAF attack scores (SQLi, XSS, and RCE indicators). Activity is consistent with automated web application probing or exploitation attempts against a public‑facing site.
show less
Inbound HTTPS (TCP/443) traffic identified as Qualys Scanner Detection originating from external IP ...
show moreInbound HTTPS (TCP/443) traffic identified as Qualys Scanner Detection originating from external IP 219.92.3.57. Activity indicates automated vulnerability scanning against internet‑facing SSL/VPN services. Connection was reset by the firewall. Behavior consistent with reconnaissance and unauthorized probing.
show less
HTTP GET request from external IP 52.45.146.35 targeting public web service over HTTPS. Traffic was ...
show moreHTTP GET request from external IP 52.45.146.35 targeting public web service over HTTPS. Traffic was processed by WAF DDoS module and actively blocked (cc_action=block). Log source indicates ddos_access_log, consistent with application‑layer (L7) DDoS or automated high‑rate request activity.
show less
Unsolicited inbound HTTPS (TCP/443) connection attempt from external IP 199.45.155.111 (Hong Kong) t ...
show moreUnsolicited inbound HTTPS (TCP/443) connection attempt from external IP 199.45.155.111 (Hong Kong) to a DMZ‑hosted server in Malaysia via DNAT. Connection was short‑lived and forcibly reset by the firewall. Activity is consistent with automated web probing or unauthorized access attempts.
show less
Inbound HTTPS (TCP/443) traffic from external IP 172.232.39.138 (France) detected as Gitscanner Traf ...
show moreInbound HTTPS (TCP/443) traffic from external IP 172.232.39.138 (France) detected as Gitscanner Traffic. Activity indicates automated reconnaissance/scanning behavior commonly associated with vulnerability discovery and unauthorized access attempts. Traffic was alerted by Palo Alto threat prevention.
show less
Unsolicited inbound RDP (TCP/3389) connection attempt from external IP 130.12.180.36 (Canada) to loc ...
show moreUnsolicited inbound RDP (TCP/3389) connection attempt from external IP 130.12.180.36 (Canada) to local host in Malaysia. Traffic matched RDP service and was terminated by firewall (server reset). Activity consistent with RDP brute‑force or unauthorized access attempt.
show less
Unsolicited UDP traffic to NTP port 123 blocked by perimeter firewall. Pattern consistent with NTP-b ...
show moreUnsolicited UDP traffic to NTP port 123 blocked by perimeter firewall. Pattern consistent with NTP-based DDoS activity.
show less
<190>27792993: 27792947: Dec 25 21:03:58.775: %FMANFP-6-IPACCESSLOGP: F0/0: fman_fp_image: list secu ...
show more<190>27792993: 27792947: Dec 25 21:03:58.775: %FMANFP-6-IPACCESSLOGP: F0/0: fman_fp_image: list security_Internet-Inbound denied tcp 2e21.31a1.1d7a 194.180.49.218(57953) GigabitEthernet0/0/0-> *.*.*.*(29605), 1 packet
show less
91ecd9a37ea4","ClientIPAddress":"161.142.181.178","ClientInfoString":"Client=OutlookService;Outlook- ...
show more91ecd9a37ea4","ClientIPAddress":"161.142.181.178","ClientInfoString":"Client=OutlookService;Outlook-Android/2.0;","ExternalAccess":false,"InternalLogonType":0,"LogonType":0,"LogonUserSid":"S-1-5-21-576727048-3007507707-176195624-35639257","
show less
,2024-02-02T03:36:55.701+08:00,,,encrypted-tunnel,networking,browser-based,4,"used-by-malware,able-t ...
show more,2024-02-02T03:36:55.701+08:00,,,encrypted-tunnel,networking,browser-based,4,"used-by-malware,able-to-transfer-file,has-known-vulnerability,tunnel-other-application,pervasive-use",,ssl,no,no,0
show less