{"cve_id":"CVE-2022-3236","title":"Sophos Firewall <= 19.0 MR1 - Remote Code Execution","severity":"critical","actively_exploited":true,"patterns":["/webconsole/Controller","/userportal/Controller"],"events":65,"unique_ips":12,"actors":[{"ip":"82.24.200.58","events":11,"country_code":"US","country":"United States","org":"Tier.Net Technologies LLC","rdns":"fmQB7ho0.strike.bz","scanner_tag":null},{"ip":"91.92.43.129","events":9,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"93.152.224.155","events":8,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"91.92.33.66","events":6,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"91.92.33.34","events":6,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"93.152.224.173","events":5,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"91.92.43.130","events":5,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"91.92.33.114","events":4,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"101.36.125.58","events":4,"country_code":"HK","country":"Hong Kong","org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","rdns":"","scanner_tag":null},{"ip":"94.26.90.114","events":3,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"91.92.33.65","events":2,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"93.152.224.157","events":2,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null}],"top_asns":[{"asn":207043,"org":"Dedik Services Limited","events":50,"ips":10},{"asn":397423,"org":"Tier.Net Technologies LLC","events":11,"ips":1},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":4,"ips":1}],"fingerprints":{"ja4h":["po11nn08en_ce1b022e3386","ge11nn07en_c3e833da1ad8","ge11nn0400_e2507f5a1e13","po11nn0700_a31fd1a9b97b"],"ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i250900_b78ed14e2fd0_e7c285222651","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"%f0%9f%a6%9e\":\"test\"}","/userportal/Controller","/webconsole/Controller","/userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"🦞\":\"test\"}"],"timeline":[{"day":"2026-05-15","events":4,"ips":1},{"day":"2026-07-19","events":1,"ips":1},{"day":"2026-07-20","events":8,"ips":1},{"day":"2026-07-21","events":32,"ips":11},{"day":"2026-07-23","events":20,"ips":10}],"window_hours":2160}