CVE-2021-31207 Attacker hosts for 2026-10-19
Oct 19, 2026
Exploitation
Last Updated: 00:00 UTC
Microsoft Exchange ProxyShell post-auth RCE (arbitrary file write via PowerShell backend).
CVE References
Observed URIs
Attackers by Country
| Sweden | 3 | 37.5% |
| Netherlands | 2 | 25.0% |
| United States of America | 2 | 25.0% |
| Russian Federation | 1 | 12.5% |
IP Address : ASN : City/Provider
-
146.0.75.2 : AS57043 hostkey b.v. : Netherlands
-
149.102.146.155 : AS51167 contabo gmbh : United States of America
-
185.196.9.61 : AS42624 simple carrier llc : United States of America
-
198.167.197.162 : AS39287 ab stract : Sweden
-
198.167.197.194 : AS39287 ab stract : Sweden
-
198.167.197.204 : AS39287 ab stract : Sweden
-
45.9.20.65 : ASNone : Russian Federation
-
5.39.220.94 : AS57043 hostkey b.v. : Netherlands