(02)異常管理 » 02_資安事件及異常紀錄

2023-10-04

16:23 非法入侵 #294 (Closed-關閉): tphq7lap328d(f_002d8d)

Path
d:\users\dennis wang\appdata\local\google\chrome\user data\default\cache\cache_data\f_002d8d Joy Liao

16:22 非法入侵 #292: tphq7lap328d(9eb9658e-a815-4c74-ae62-8cd77580d2db.tmp)

Path
d:\users\dennis wang\downloads\9eb9658e-a815-4c74-ae62-8cd77580d2db.tmp Joy Liao

16:21 非法入侵 #293 (Closed-關閉): taholt-ad17(file0005.chk、file0004.chk、file0003.chk)

Joy Liao

2023-10-03

15:02 非法入侵 #292 (Closed-關閉): tphq7lap328d(9eb9658e-a815-4c74-ae62-8cd77580d2db.tmp)

Path
d:\users\dennis wang\downloads\9eb9658e-a815-4c74-ae62-8cd77580d2db.tmp Joy Liao

14:20 非法入侵 #291 (Closed-關閉): ulpu-xd-pc-0001(lum_sdk64.dll)

Command line
"C:/Program Files (x86)/FormatFactory/net_updater64.exe" --updater win_formatfactory.pcfreetime.com Joy Liao

2023-09-28

13:42 非法入侵 #279: veolia - Incident - SSH service exposed - 60.248.4.74:22(ULPU)

INCIDENT - CLOSING

  low  
Name:

SSH service exposed - 60.248.4.74:22
Service:

  CTI   
Created at:
... Joy Liao

13:29 非法入侵 #279 (Closed-關閉): veolia - Incident - SSH service exposed - 60.248.4.74:22(ULPU)

INCIDENT - CLOSING  low  
Name:
SSH service exposed - 60.248.4.74:22
Service:  CTI   
Created at:
2023-07-19 1... Joy Liao

13:39 非法入侵 #284 (Closed-關閉): veolia - Incident - Authentication portal exposed - https://60.248.4.77:900/ - CLOSING(ULPU)

INCIDENT - CLOSING

  low  
Name:

Authentication portal exposed - https://60.248.4.77:900/
Service:

  ... Joy Liao

13:35 非法入侵 #283 (Closed-關閉): veolia - Incident - Exposed authentication portal: Fortinet - https://202.39.219.151:10443/ - CLOSING(XinDian)

INCIDENT - CLOSING

  medium  
Name:

Exposed authentication portal: Fortinet - https://202.39.219.151:10443... Joy Liao

13:33 非法入侵 #282 (Closed-關閉): veolia - Incident - Fortinet authentication portal exposed - https://118.163.66.37:10443/remote/login?lang=en - CLOSING(WC)

INCIDENT - CLOSING
  low  
Name:
Fortinet authentication portal exposed - https://118.163.66.37:10443/remote/log... Joy Liao

13:32 非法入侵 #281 (Closed-關閉): veolia - Incident - SSH service exposed - 60.248.4.77:2222 - CLOSING(ULPU)

INCIDENT - CLOSING
  low  
Name:
SSH service exposed - 60.248.4.77:2222
Service:
  CTI   
Created at:
2023... Joy Liao

13:31 非法入侵 #280 (Closed-關閉): veolia - Incident - Exposed authentication portal - https://118.163.66.42/auth.html - CLOSING(WC)

INCIDENT - CLOSING
  medium  
Name:
Exposed authentication portal - https://118.163.66.42/auth.html
Service:
... Joy Liao