Microsoft Exchange ECP Probe (ProxyShell / ProxyLogon) for 2026-10-22
Last Updated: 00:00 UTC
The Exchange Control Panel (/ecp/) is the attack surface for ProxyLogon (CVE-2021-26855) and ProxyShell (CVE-2021-34473/34523/31207). Both exploit chains begin with ECP requests and achieve unauthenticated RCE leading to ASPX webshell deployment on the Exchange server.
CVE References
MITRE ATT&CK
Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application
Observed URIs
Attackers by Country
| Germany | 25 | 32.9% |
| United States | 15 | 19.7% |
| United Kingdom | 9 | 11.8% |
| The Netherlands | 9 | 11.8% |
| Canada | 9 | 11.8% |
| Singapore | 6 | 7.9% |
| India | 3 | 3.9% |
IP Address : ASN : City/Provider
-
104.248.33.236 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
128.199.182.152 : AS14061 DigitalOcean, LLC : Singapore
-
128.199.182.77 : AS14061 DigitalOcean, LLC : Singapore
-
134.122.28.88 : AS14061 DigitalOcean, LLC : North Bergen
-
138.197.191.87 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
138.68.144.227 : AS14061 DigitalOcean, LLC : Slough
-
138.68.82.23 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
138.68.86.32 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
139.162.139.31 : AS63949 Akamai Connected Cloud : Frankfurt am Main
-
139.59.132.8 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
139.59.136.184 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
139.59.143.102 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
139.59.231.238 : AS14061 DigitalOcean, LLC : Singapore
-
142.93.0.66 : AS14061 DigitalOcean, LLC : North Bergen
-
142.93.129.190 : AS14061 DigitalOcean, LLC : Amsterdam
-
142.93.143.8 : AS14061 DigitalOcean, LLC : Amsterdam
-
143.110.217.244 : AS14061 DigitalOcean, LLC : Toronto
-
143.244.168.161 : AS14061 DigitalOcean, LLC : North Bergen
-
146.190.103.103 : AS14061 DigitalOcean, LLC : Singapore
-
146.190.242.161 : AS14061 DigitalOcean, LLC : Toronto
-
146.190.63.248 : AS14061 DigitalOcean, LLC : Santa Clara
-
146.190.63.48 : AS14061 DigitalOcean, LLC : Santa Clara
-
147.182.149.75 : AS14061 DigitalOcean, LLC : Toronto
-
147.182.200.94 : AS14061 DigitalOcean, LLC : Santa Clara
-
157.230.19.140 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
157.245.105.107 : AS14061 DigitalOcean, LLC : Bengaluru
-
157.245.204.205 : AS14061 DigitalOcean, LLC : Singapore
-
157.245.36.108 : AS14061 DigitalOcean, LLC : Slough
-
159.223.132.86 : AS14061 DigitalOcean, LLC : North Bergen
-
159.223.229.166 : AS14061 DigitalOcean, LLC : Amsterdam
-
159.65.18.197 : AS14061 DigitalOcean, LLC : Slough
-
159.89.12.166 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
159.89.127.165 : AS14061 DigitalOcean, LLC : Toronto
-
159.89.174.87 : AS14061 DigitalOcean, LLC : Bengaluru
-
164.90.208.56 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
164.90.228.79 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
164.92.107.174 : AS14061 DigitalOcean, LLC : Santa Clara
-
164.92.244.132 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
165.22.235.3 : AS14061 DigitalOcean, LLC : Toronto
-
165.227.173.41 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
165.227.39.235 : AS14061 DigitalOcean, LLC : Toronto
-
165.227.84.14 : AS14061 DigitalOcean, LLC : North Bergen
-
167.172.158.128 : AS14061 DigitalOcean, LLC : North Bergen
-
167.71.175.236 : AS14061 DigitalOcean, LLC : Clifton
-
167.71.81.114 : AS14061 DigitalOcean, LLC : Clifton
-
167.99.181.249 : AS14061 DigitalOcean, LLC : Toronto
-
167.99.182.39 : AS14061 DigitalOcean, LLC : Toronto
-
167.99.210.137 : AS14061 DigitalOcean, LLC : Amsterdam
-
178.128.207.138 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
178.128.45.181 : AS14061 DigitalOcean, LLC : Slough
-
188.166.108.93 : AS14061 DigitalOcean, LLC : Amsterdam
-
188.166.147.46 : AS14061 DigitalOcean, LLC : Slough
-
192.46.211.230 : AS63949 Akamai Connected Cloud : Mumbai
-
192.53.121.171 : AS63949 Akamai Connected Cloud : Toronto
-
206.189.19.19 : AS14061 DigitalOcean, LLC : Slough
-
206.189.2.13 : AS14061 DigitalOcean, LLC : Amsterdam
-
206.189.225.181 : AS14061 DigitalOcean, LLC : North Bergen
-
206.189.233.36 : AS14061 DigitalOcean, LLC : North Bergen
-
206.189.95.232 : AS14061 DigitalOcean, LLC : Singapore
-
206.81.12.187 : AS14061 DigitalOcean, LLC : North Bergen
-
206.81.24.227 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
206.81.24.74 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
207.154.197.113 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
207.154.212.47 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
209.38.208.202 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
209.38.248.17 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
209.97.180.8 : AS14061 DigitalOcean, LLC : Slough
-
46.101.1.225 : AS14061 DigitalOcean, LLC : Slough
-
46.101.111.185 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
64.225.75.246 : AS14061 DigitalOcean, LLC : Amsterdam
-
64.226.65.160 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
64.226.78.121 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
64.227.32.66 : AS14061 DigitalOcean, LLC : Slough
-
64.227.70.2 : AS14061 DigitalOcean, LLC : Amsterdam
-
68.183.75.40 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
68.183.9.16 : AS14061 DigitalOcean, LLC : Amsterdam