🇮🇪
34.242.56.181
14 Feb 2024
WAF threat prevented: Cross-site Scripting (XSS) Attack
Web App Attack
🇮🇪
18.201.223.163
14 Feb 2024
SSLVPN: id=sslvpn sn=xxxxxx time="2024-02-14 10:35:19" vp_time="2024-02-14 09:35:19
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2024-02-14 10:35:19" vp_time="2024-02-14 09:35:19
UTC" fw=xxx.xxx.xxx.xxx pri=1 m=28 c=28 src=18.201.223.163 dst="xxxxxx" user="System"
usr="System" msg="Reset connection to prevent Denial of Service attack - too many
connections received from the same client" agent="(null)"
show less
DDoS Attack
Hacking
🇺🇸
159.203.224.31
25 Oct 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-24 19:24:07" vp_time="2023-10-24 17:24:07
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-24 19:24:07" vp_time="2023-10-24 17:24:07
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=159.203.224.31 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
162.243.142.29
23 Oct 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-23 14:52:12" vp_time="2023-10-23 12:52:12
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-23 14:52:12" vp_time="2023-10-23 12:52:12
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=162.243.142.29 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
159.203.208.23
23 Oct 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-21 01:03:04" vp_time="2023-10-20 23:03:04
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-21 01:03:04" vp_time="2023-10-20 23:03:04
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=159.203.208.23 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
198.199.95.67
23 Oct 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-22 05:17:12" vp_time="2023-10-22 03:17:12
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-22 05:17:12" vp_time="2023-10-22 03:17:12
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.95.67 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.235.33
18 Oct 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-18 12:18:36" vp_time="2023-10-18 10:18:36
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-10-18 12:18:36" vp_time="2023-10-18 10:18:36
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.235.33 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.236.14
26 Sep 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-09-26 18:34:38" vp_time="2023-09-26 16:34:38
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-09-26 18:34:38" vp_time="2023-09-26 16:34:38
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.236.14 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
198.199.115.30
18 Aug 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-18 04:16:37" vp_time="2023-08-18 02:16:37
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-18 04:16:37" vp_time="2023-08-18 02:16:37
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.115.30 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.236.82
17 Aug 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-16 20:50:27" vp_time="2023-08-16 18:50:27
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-16 20:50:27" vp_time="2023-08-16 18:50:27
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.236.82 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.227.15
16 Aug 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-15 14:15:03" vp_time="2023-08-15 12:15:03
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-08-15 14:15:03" vp_time="2023-08-15 12:15:03
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.227.15 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
198.199.101.72
16 Aug 2023
SSLVPN: id=sslvpn sn=xxxxx time="2023-08-14 11:31:44" vp_time="2023-08-14 09:31:44
UTC" fw=xxx.xxx. ...
show more
SSLVPN: id=sslvpn sn=xxxxx time="2023-08-14 11:31:44" vp_time="2023-08-14 09:31:44
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.101.72 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
198.199.101.170
22 May 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-05-22 15:58:06" vp_time="2023-05-22 13:58:06
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-05-22 15:58:06" vp_time="2023-05-22 13:58:06
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.101.170 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
138.124.180.205
16 May 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-05-16 17:43:44" vp_time="2023-05-16 15:43:44
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-05-16 17:43:44" vp_time="2023-05-16 15:43:44
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.205 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU
iPhone OS 10_0 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Version/10.0
Mobile/14A346 Safari/E7FBAF"
show less
SQL Injection
🇺🇸
198.199.94.57
21 Apr 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-21 01:13:08" vp_time="2023-04-20 23:13:08
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-21 01:13:08" vp_time="2023-04-20 23:13:08
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.94.57 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
162.243.132.15
19 Apr 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-16 08:17:30" vp_time="2023-04-16 06:17:30
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-16 08:17:30" vp_time="2023-04-16 06:17:30
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=162.243.132.15 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
107.170.226.24
19 Apr 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-13 19:06:08" vp_time="2023-04-13 17:06:08
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-13 19:06:08" vp_time="2023-04-13 17:06:08
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=107.170.226.24 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.210.50
06 Apr 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-06 14:18:39" vp_time="2023-04-06 12:18:39
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-04-06 14:18:39" vp_time="2023-04-06 12:18:39
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.210.50 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
107.170.250.20
13 Mar 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-12 19:50:16" vp_time="2023-03-12 18:50:16
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-12 19:50:16" vp_time="2023-03-12 18:50:16
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=107.170.250.20 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.201.11
13 Mar 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-11 17:55:08" vp_time="2023-03-11 16:55:08
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-11 17:55:08" vp_time="2023-03-11 16:55:08
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.201.11 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.200.163
13 Mar 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-10 14:28:05" vp_time="2023-03-10 13:28:05
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-10 14:28:05" vp_time="2023-03-10 13:28:05
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.200.163 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
198.199.95.33
13 Mar 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-09 10:46:25" vp_time="2023-03-09 09:46:25
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-09 10:46:25" vp_time="2023-03-09 09:46:25
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.95.33 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.235.23
13 Mar 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-08 05:47:51" vp_time="2023-03-08 04:47:51
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-03-08 05:47:51" vp_time="2023-03-08 04:47:51
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.235.23 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
192.241.195.226
31 Jan 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-01-31 06:37:22" vp_time="2023-01-31 05:37:22
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-01-31 06:37:22" vp_time="2023-01-31 05:37:22
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.195.226 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking
🇺🇸
104.131.144.23
31 Jan 2023
SSLVPN: id=sslvpn sn=xxxxxx time="2023-01-29 17:58:52" vp_time="2023-01-29 16:58:52
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2023-01-29 17:58:52" vp_time="2023-01-29 16:58:52
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=104.131.144.23 dst="xxx.xxx.xxx.xxx"
user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF
(CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell
rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange
Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow
remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding"
agent="Mozilla/5.0 zgrab/0.x"
show less
Hacking