User Markus Holland-Letz
joined AbuseIPDB in February 2022 and has reported 457 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
WEBMASTER
IP
Date
Comment
Categories
🇺🇸
170.130.55.195
03 Mar 2022
SSLVPN: id=sslvpn sn=xxxx time="2022-03-03 18:13:36" vp_time="2022-03-03
17:13:36 UTC" fw=xxx.xxx.x ...
show more
SSLVPN: id=sslvpn sn=xxxx time="2022-03-03 18:13:36" vp_time="2022-03-03
17:13:36 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.195 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack
technique used to exploit web sites that construct SQL statements from user-supplied
input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0
(Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇺🇸
170.130.55.195
03 Mar 2022
SSLVPN: id=sslvpn sn=xxxx time="2022-03-03 12:56:12" vp_time="2022-03-03 11:56:12
UTC" fw=xxx.xxx.x ...
show more
SSLVPN: id=sslvpn sn=xxxx time="2022-03-03 12:56:12" vp_time="2022-03-03 11:56:12
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=170.130.55.195 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh;
Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0"
show less
SQL Injection
🇳🇱
168.100.10.13
03 Mar 2022
SSLVPN: id=sslvpn sn=xxxx time="2022-03-02 15:20:41" vp_time="2022-03-02 14:20:41
UTC" fw=xxx.xxx.x ...
show more
SSLVPN: id=sslvpn sn=xxxx time="2022-03-02 15:20:41" vp_time="2022-03-02 14:20:41
UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=168.100.10.13 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1"
URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select
usertype||'#'||sessionid||'#'||username||'#'||password||'#'||domainname from sessions
limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique
used to exploit web sites that construct SQL statements from user-supplied input"
sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU
iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3
Mobile/15E148 Safari/604.1"
show less
SQL Injection
🇺🇸
37.1.212.233
02 Mar 2022
SSLVPN: id=sslvpn sn=xxx time="2022-03-01 17:30:17" vp_time="2022-03-01
16:30:17 UTC" fw=xxx.xxx.xx ...
show more
SSLVPN: id=sslvpn sn=xxx time="2022-03-01 17:30:17" vp_time="2022-03-01
16:30:17 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=37.1.212.233 dst=xxx.xxx.xxx.xxx
user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File
Access" URI=xxx.xxx.xxx.xxx:443/cgi-bin/jarrewrite.sh rule-match="() { : }
echo/bin/bash -c cat/etc/passwd" AttackCat="Unauthorized Remote File Access"
summ="This allows an attacker to make an unauthorized attempt in downloading a file
from a web server" sigid="9009" category="Information Disclosure--Predictable Resource
Location" agent="() { :; }; echo ; /bin/bash -c "cat /etc/passwd""
show less
Hacking