Skip to main content
UnknownPublished

tlp clear · KRVTZ-NET IDS alerts for 2026-05-09

Affects tlp clearSource CIRCL OSINT Feed

0

TLP:CLEAR, disclosure is not limited

Description

KRVTZ-NET IDS alerts for 2026-05-09

Indicators of compromise

IP addresses 44

  • 2a00:23cc:e329:2701:ed1c:d422:5304:9e1dET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)
  • 45.67.2.87ET SCAN Exabot Webcrawler User Agent
  • 45.38.101.249ET SCAN Exabot Webcrawler User Agent
  • 104.238.7.247ET SCAN Exabot Webcrawler User Agent
  • 185.15.179.94ET SCAN Exabot Webcrawler User Agent
  • 82.21.226.149ET SCAN Exabot Webcrawler User Agent
  • 82.23.206.220ET SCAN Exabot Webcrawler User Agent
  • 2001:470:2cc:1::1ffET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)
  • 43.156.71.177ET USER_AGENTS User-Agent (_TEST_)
  • 2001:470:1:fb5::280ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)

Community reviews

Loading reviews…