AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Markus Holland-Letz joined AbuseIPDB in February 2022 and has reported 457 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇳🇴 217.170.197.26	28 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-27 23:38:39" vp_time="2022-03-27 21:38:39 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-27 23:38:39" vp_time="2022-03-27 21:38:39 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=217.170.197.26 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 172.86.75.25	28 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-25 09:03:36" vp_time="2022-03-25 08:03:36 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-25 09:03:36" vp_time="2022-03-25 08:03:36 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=172.86.75.25 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇬🇧 37.120.198.237	28 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-25 07:50:19" vp_time="2022-03-25 06:50:19 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-25 07:50:19" vp_time="2022-03-25 06:50:19 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.120.198.237 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇬🇧 37.120.198.237	24 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-24 17:03:02" vp_time="2022-03-24 16:03:02 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-24 17:03:02" vp_time="2022-03-24 16:03:02 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.120.198.237 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇹🇷 147.78.47.10	24 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-24 00:49:40" vp_time="2022-03-23 23:49:40 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-24 00:49:40" vp_time="2022-03-23 23:49:40 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=147.78.47.10 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 195.211.98.115	24 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxtime="2022-03-23 22:26:20" vp_time="2022-03-23 21:26:20 UTC" fw=xxx.xxx. ... show more SSLVPN: id=sslvpn sn=xxxxxxtime="2022-03-23 22:26:20" vp_time="2022-03-23 21:26:20 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=195.211.98.115 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇬🇧 37.120.198.237	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-22 16:02:30" vp_time="2022-03-22 15:02:30 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-22 16:02:30" vp_time="2022-03-22 15:02:30 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.120.198.237 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇫🇷 51.195.103.74	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-22 12:02:44" vp_time="2022-03-22 11:02:44 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-22 12:02:44" vp_time="2022-03-22 11:02:44 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=51.195.103.74 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇳🇱 185.142.239.49	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-21 12:39:29" vp_time="2022-03-21 11:39:29 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-21 12:39:29" vp_time="2022-03-21 11:39:29 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.142.239.49 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇳🇱 172.86.75.25	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-19 17:21:21" vp_time="2022-03-19 16:21:21 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-19 17:21:21" vp_time="2022-03-19 16:21:21 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=172.86.75.25 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 45.79.74.28	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-18 17:01:12" vp_time="2022-03-18 16:01:12 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-18 17:01:12" vp_time="2022-03-18 16:01:12 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=45.79.74.28 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/api/geojson?url=file:///etc/hosts rule-match="file:///etc/hosts" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="sftlnr - (http://sftlnr.com/)" show less	Hacking Web App Attack
🇺🇸 23.239.4.107	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-18 15:04:42" vp_time="2022-03-18 14:04:42 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-18 15:04:42" vp_time="2022-03-18 14:04:42 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=23.239.4.107 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/api/geojson?url=file:///etc/hosts rule-match="file:///etc/hosts" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="sftlnr - (http://sftlnr.com/)" show less	SQL Injection
🇳🇱 5.255.102.224	23 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-18 12:40:38" vp_time="2022-03-18 11:40:38 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-18 12:40:38" vp_time="2022-03-18 11:40:38 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.255.102.224 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇩🇪 140.82.36.168	14 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-11 23:50:56" vp_time="2022-03-11 22:50:56 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-11 23:50:56" vp_time="2022-03-11 22:50:56 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=140.82.36.168 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇬🇧 37.120.198.237	14 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-11 14:49:04" vp_time="2022-03-11 13:49:04 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-11 14:49:04" vp_time="2022-03-11 13:49:04 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.120.198.237 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇩🇪 185.14.45.65	10 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-10 05:13:40" vp_time="2022-03-10 04:13:40 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-10 05:13:40" vp_time="2022-03-10 04:13:40 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.14.45.65 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 170.130.55.195	10 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxxxx time="2022-03-09 17:26:54" vp_time="2022-03-09 16:26:54 UTC" fw=xxx. ... show more SSLVPN: id=sslvpn sn=xxxxxxxxx time="2022-03-09 17:26:54" vp_time="2022-03-09 16:26:54 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.195 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇹🇷 147.78.47.242	10 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxxtime="2022-03-09 12:18:52" vp_time="2022-03-09 11:18:52 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxxxtime="2022-03-09 12:18:52" vp_time="2022-03-09 11:18:52 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=147.78.47.242 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇫🇷 137.74.176.162	08 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-08 10:08:15" vp_time="2022-03-08 09:08:15 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-08 10:08:15" vp_time="2022-03-08 09:08:15 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=137.74.176.162 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇱🇺 104.244.79.160	08 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxxx time="2022-03-07 20:04:38" vp_time="2022-03-07 19:04:38 UTC" fw=xxx.x ... show more SSLVPN: id=sslvpn sn=xxxxxxxx time="2022-03-07 20:04:38" vp_time="2022-03-07 19:04:38 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=104.244.79.160 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 170.130.55.195	08 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxxx time="2022-03-07 20:03:48" vp_time="2022-03-07 19:03:48 UTC" fw=xxx.x ... show more SSLVPN: id=sslvpn sn=xxxxxxxx time="2022-03-07 20:03:48" vp_time="2022-03-07 19:03:48 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.195 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇺🇸 170.130.55.211	08 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-07 17:59:30" vp_time="2022-03-07 16:59:30 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxxx time="2022-03-07 17:59:30" vp_time="2022-03-07 16:59:30 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.211 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 170.130.55.211	07 Mar 2022	SSLVPN: id=sslvpn sn=xxxxx time="2022-03-07 15:20:05" vp_time="2022-03-07 14:20:05 UTC" fw=xxx.xxx. ... show more SSLVPN: id=sslvpn sn=xxxxx time="2022-03-07 15:20:05" vp_time="2022-03-07 14:20:05 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.211 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 170.130.55.195	07 Mar 2022	SSLVPN: id=sslvpn sn=xxxxx time="2022-03-07 10:33:47" vp_time="2022-03-07 09:33:47 UTC" fw=xxx.xxx. ... show more SSLVPN: id=sslvpn sn=xxxxx time="2022-03-07 10:33:47" vp_time="2022-03-07 09:33:47 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.195 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇳🇱 159.65.200.34	07 Mar 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-07 07:54:08" vp_time="2022-03-07 06:54:08 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-03-07 07:54:08" vp_time="2022-03-07 06:54:08 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=159.65.200.34 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/api/geojson?url=file:///etc/hosts rule-match="file:///etc/hosts" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="l9explore/1.3.0" show less	Web App Attack