CVE-2019-19781 scans detected by Bad Packets – last 24 hours

{
  "count": 6,
  "next": null,
  "previous": null,
  "results": [
    {
      "source_ip_address": "5.101.0.209",
      "country": "RU",
      "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 80,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 248,
      "first_seen": "2020-01-12T13:20:04Z",
      "last_seen": "2020-01-14T03:25:04Z"
    },
    {
      "source_ip_address": "54.38.157.11",
      "country": "DE",
      "user_agent": "curl/7.67.0",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 443,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 30,
      "first_seen": "2020-01-13T03:13:30Z",
      "last_seen": "2020-01-14T02:00:44Z"
    },
    {
      "source_ip_address": "5.101.0.209",
      "country": "RU",
      "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 443,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 622,
      "first_seen": "2020-01-12T12:16:24Z",
      "last_seen": "2020-01-14T02:00:19Z"
    },
    {
      "source_ip_address": "185.234.216.20",
      "country": "IE",
      "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 443,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 31,
      "first_seen": "2020-01-13T19:01:01Z",
      "last_seen": "2020-01-14T01:27:27Z"
    },
    {
      "source_ip_address": "193.57.40.46",
      "country": "UA",
      "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 443,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 91,
      "first_seen": "2020-01-12T22:25:24Z",
      "last_seen": "2020-01-14T00:12:09Z"
    },
    {
      "source_ip_address": "82.102.16.220",
      "country": "DE",
      "user_agent": "curl/7.58.0",
      "payload": "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1",
      "post_data": "",
      "target_port": 443,
      "protocol": "tcp",
      "tags": [
        {
          "cve": "CVE-2019-19781",
          "category": "Platform",
          "description": "Citrix NetScaler Gateway Exploit"
        }
      ],
      "event_count": 5,
      "first_seen": "2020-01-10T00:07:56Z",
      "last_seen": "2020-01-13T13:16:31Z"
    }
  ]
}