AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Markus Holland-Letz joined AbuseIPDB in February 2022 and has reported 457 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 192.241.208.79	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-10 08:31:22" vp_time="2022-12-10 07:31:22 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-10 08:31:22" vp_time="2022-12-10 07:31:22 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.208.79 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.207.118	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-09 07:54:27" vp_time="2022-12-09 06:54:27 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-09 07:54:27" vp_time="2022-12-09 06:54:27 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.207.118 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.206.232	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-08 01:09:10" vp_time="2022-12-08 00:09:10 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-08 01:09:10" vp_time="2022-12-08 00:09:10 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.206.232 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.209.114	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-06 19:20:00" vp_time="2022-12-06 18:20:00 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-06 19:20:00" vp_time="2022-12-06 18:20:00 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.209.114 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇩🇪 194.195.245.61	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-07 10:24:28" vp_time="2022-12-07 09:24:28 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-07 10:24:28" vp_time="2022-12-07 09:24:28 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=194.195.245.61 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 192.241.193.60	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-04 22:22:33" vp_time="2022-12-04 21:22:33 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-04 22:22:33" vp_time="2022-12-04 21:22:33 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.193.60 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 198.199.95.231	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-03 17:14:07" vp_time="2022-12-03 16:14:07 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-03 17:14:07" vp_time="2022-12-03 16:14:07 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.95.231 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.210.164	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-02 13:38:10" vp_time="2022-12-02 12:38:10 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-12-02 13:38:10" vp_time="2022-12-02 12:38:10 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.210.164 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 138.124.180.237	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-30 19:47:51" vp_time="2022-11-30 18:47:51 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-30 19:47:51" vp_time="2022-11-30 18:47:51 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 192.241.203.28	13 Dec 2022	SSLVPN: id=sslvpn sn=18B169CD281C time="2022-12-01 13:30:37" vp_time="2022-12-01 12:30:37 UTC" fw=x ... show more SSLVPN: id=sslvpn sn=18B169CD281C time="2022-12-01 13:30:37" vp_time="2022-12-01 12:30:37 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.203.28 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.201.172	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-30 11:59:12" vp_time="2022-11-30 10:59:12 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-30 11:59:12" vp_time="2022-11-30 10:59:12 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.201.172 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇳🇱 146.0.77.39	13 Dec 2022	SSLVPN: id=sslvpn sn=18B169CD281C time="2022-11-29 03:21:19" vp_time="2022-11-29 02:21:19 UTC" fw=x ... show more SSLVPN: id=sslvpn sn=18B169CD281C time="2022-11-29 03:21:19" vp_time="2022-11-29 02:21:19 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=146.0.77.39 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd rule-match="/etc/passwd" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="curl/7.54.0" show less	Hacking
🇺🇸 138.124.180.237	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-28 19:47:53" vp_time="2022-11-28 18:47:53 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-28 19:47:53" vp_time="2022-11-28 18:47:53 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 198.199.119.107	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-28 10:40:58" vp_time="2022-11-28 09:40:58 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-28 10:40:58" vp_time="2022-11-28 09:40:58 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.119.107 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 198.199.95.77	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-27 09:57:29" vp_time="2022-11-27 08:57:29 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-27 09:57:29" vp_time="2022-11-27 08:57:29 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.95.77 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 198.199.95.88	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-26 01:03:26" vp_time="2022-11-26 00:03:26 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-26 01:03:26" vp_time="2022-11-26 00:03:26 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.199.95.88 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 138.124.180.237	13 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-25 23:20:06" vp_time="2022-11-25 22:20:06 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-25 23:20:06" vp_time="2022-11-25 22:20:06 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/602.4.6 (KHTML, like Gecko) Version/10.0 Mobile/14A346 Safari/E7FBAF" show less	SQL Injection
🇺🇸 192.241.210.68	01 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-21 17:15:14" vp_time="2022-11-21 16:15:14 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-21 17:15:14" vp_time="2022-11-21 16:15:14 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.210.68 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.195.101	01 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-20 13:41:57" vp_time="2022-11-20 12:41:57 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-20 13:41:57" vp_time="2022-11-20 12:41:57 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.195.101 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.193.21	01 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-19 11:59:58" vp_time="2022-11-19 10:59:58 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-19 11:59:58" vp_time="2022-11-19 10:59:58 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.193.21 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 192.241.209.175	01 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-18 11:04:39" vp_time="2022-11-18 10:04:39 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-18 11:04:39" vp_time="2022-11-18 10:04:39 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=192.241.209.175 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Microsoft Exchange Server SSRF (CVE-2022-41040)" URI=xxx.xxx.xxx.xxx:443/autodiscover/autodiscover.json?@zdi/Powershell rule-match="/autodiscover/autodiscover.json?@zdi/powershell" AttackCat="Microsoft Exchange Server SSRF (CVE-2022-41040)" summ="Microsoft Exchange has a vulnerability which can allow remote attackers to execute code" sigid="1743" category="Command Execution--OS Commanding" agent="Mozilla/5.0 zgrab/0.x" show less	Hacking
🇺🇸 138.124.180.237	01 Dec 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 23:41:13" vp_time="2022-11-17 22:41:13 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 23:41:13" vp_time="2022-11-17 22:41:13 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 138.124.180.237	17 Nov 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 19:50:47" vp_time="2022-11-17 18:50:47 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 19:50:47" vp_time="2022-11-17 18:50:47 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 138.124.180.237	17 Nov 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 13:05:51" vp_time="2022-11-17 12:05:51 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 13:05:51" vp_time="2022-11-17 12:05:51 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=138.124.180.237 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 5.255.105.249	17 Nov 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 12:02:31" vp_time="2022-11-17 11:02:31 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-11-17 12:02:31" vp_time="2022-11-17 11:02:31 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.255.105.249 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection