HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability

HoneyLabs honeypots recorded 16 probes matching CVE-2021-26855 from 10 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2021-11-03.

Request paths that identify it

  • /owa/auth/x.js

Addresses probing it

Source IPProbesNetworkCountry
40.119.40.275Microsoft Corporation · commercial scanner: StretchoidUnited States
135.119.19.1342Microsoft CorporationUnited States
4.150.200.232Microsoft CorporationUnited States
134.33.66.2101Microsoft Corporation · commercial scanner: StretchoidUnited States
172.180.64.721Microsoft Corporation · commercial scanner: StretchoidUnited States
20.51.250.2311Microsoft Corporation · commercial scanner: StretchoidUnited States
4.227.154.221Microsoft Corporation · commercial scanner: StretchoidUnited States
40.124.186.1841Microsoft Corporation · commercial scanner: StretchoidUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1610

Where it comes from

CountryProbes
United States16

Captured requests

  • /owa/auth/x.js

HTTP client fingerprints

  • b11cun050_08040016_6289c865

CVE report

CVE report

Open a specific CVE from the CVE tracker.