5.252.190[.]233IP address
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
MOVEit Transfer Critical Vulnerability CVE-2023-34362“…sapi/moveitisapi.dll action=m2 443 - 5.252.191.14 user-agent - 2002023-05-30 17:06:04 192.168.###.### POST /guestaccess.aspx - 443 - 5.252.190[.]233 user-agent - 2002023-05-30 17:06:08 192.168.###.### PUT /api/v1/folders/605824912/files uploadType=resumable&fileId=963061209 443 - 5…”
Indicators reported together
named in the same reports- 5.252.190[.]181in 1 report
- 5.252.191[.]14in 1 report
- 5.252.190[.]116in 1 report
- 5.252.191[.]88in 1 report
- 89.39.105[.]108in 1 report
- 148.113.152[.]144in 1 report
- 138.197.152[.]201in 1 report
- 209.97.137[.]33in 1 report
- hxxps://community.progress[.]com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023in 1 report
- community.progress[.]comin 1 report
- hxxps://www.reddit[.]com/r/sysadmin/comments/13wxuej/critical_vulnerability_moveit_file_transfer/in 1 report
- hxxps://www.trustedsec[.]com/blog/critical-vulnerability-in-progress-moveit-transfer-technical-analysis-and-recommendations/in 1 report
- www.trustedsec[.]comin 1 report
- hxxps://digital.nhs[.]uk/cyber-alerts/2023/cc-4326in 1 report
- digital.nhs[.]ukin 1 report
Copy these 15 indicators · defanged
Also named with it: CVE-2023-34362, CVE-2023-35036
Thanks — we review every report.