Spreading email with next virus details MSExcel/CVE_2017_11882.7584!exploit https://fortiguard.forti ...
show moreSpreading email with next virus details MSExcel/CVE_2017_11882.7584!exploit https://fortiguard.fortinet.com/encyclopedia/virus/10111840
show less
Attack Name: MS.Exchange.Server.Autodiscover.Remote.Code.Execution - https://www.fortiguard.com/ency ...
show moreAttack Name: MS.Exchange.Server.Autodiscover.Remote.Code.Execution - https://www.fortiguard.com/encyclopedia/ips/50584
Fortigate blocked IP by IPS signature.
show less
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xC000006D
...
show moreFailure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xC000006D
Sub Status: 0xC0000064
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: debian
Source Network Address: 37.120.222.59
Source Port: 53202
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
show less
Almost last 24h there is attacks by poisoned host constantly brute-force/spoofing/tries of hacking, ...
show moreAlmost last 24h there is attacks by poisoned host constantly brute-force/spoofing/tries of hacking, please read bellow log from the event viewer:
Network Information:
Workstation Name: debian
Source Network Address: 87.120.37.232
Source Port: 50286
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
show less