AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Markus Holland-Letz joined AbuseIPDB in February 2022 and has reported 457 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇩🇪 194.195.245.61	10 Oct 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-10-04 11:31:11" vp_time="2022-10-04 09:31:11 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-10-04 11:31:11" vp_time="2022-10-04 09:31:11 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=194.195.245.61 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=185.237.132.44:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 185.130.224.57	10 Oct 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-30 10:51:36" vp_time="2022-09-30 08:51:36 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-30 10:51:36" vp_time="2022-09-30 08:51:36 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.130.224.57 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd rule-match="/etc/passwd" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="curl/7.54.0" show less	Hacking
🇺🇸 50.116.19.225	10 Oct 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-29 21:27:12" vp_time="2022-09-29 19:27:12 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-29 21:27:12" vp_time="2022-09-29 19:27:12 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=50.116.19.225 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇷🇺 46.3.199.88	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-26 17:35:01" vp_time="2022-09-26 15:35:01 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-26 17:35:01" vp_time="2022-09-26 15:35:01 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=46.3.199.88 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 92.119.179.83	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-23 12:57:10" vp_time="2022-09-23 10:57:10 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-23 12:57:10" vp_time="2022-09-23 10:57:10 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=92.119.179.83 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 206.166.251.126	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-23 12:22:47" vp_time="2022-09-23 10:22:47 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-23 12:22:47" vp_time="2022-09-23 10:22:47 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=206.166.251.126 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 92.119.179.86	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-22 12:54:41" vp_time="2022-09-22 10:54:41 UTC" fw=xxx.xx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-22 12:54:41" vp_time="2022-09-22 10:54:41 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=92.119.179.86 dst="xxx.xxx.xxx.xxx" user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇩🇪 194.195.245.61	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-21 09:37:14" vp_time="2022-09-21 07:37:14 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-21 09:37:14" vp_time="2022-09-21 07:37:14 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=194.195.245.61 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 5.2.77.19	26 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-21 05:43:40" vp_time="2022-09-21 03:43:40 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-21 05:43:40" vp_time="2022-09-21 03:43:40 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.2.77.19 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 5.2.77.19	19 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-16 23:49:16" vp_time="2022-09-16 21:49:16 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-16 23:49:16" vp_time="2022-09-16 21:49:16 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.2.77.19 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇧🇬 185.225.73.244	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-12 10:07:20" vp_time="2022-09-12 08:07:20 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-12 10:07:20" vp_time="2022-09-12 08:07:20 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.225.73.244 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 92.119.179.83	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-12 12:51:27" vp_time="2022-09-12 10:51:27 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-12 12:51:27" vp_time="2022-09-12 10:51:27 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=92.119.179.83 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇳🇱 92.119.179.86	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-07 12:29:09" vp_time="2022-09-07 10:29:09 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-07 12:29:09" vp_time="2022-09-07 10:29:09 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=92.119.179.86 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇺🇸 193.149.129.3	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 15:03:55" vp_time="2022-09-06 13:03:55 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 15:03:55" vp_time="2022-09-06 13:03:55 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=193.149.129.3 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection
🇮🇪 52.215.182.248	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 08:15:30" vp_time="2022-09-06 06:15:30 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 08:15:30" vp_time="2022-09-06 06:15:30 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=52.215.182.248 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: Unauthorized Remote File Access" URI=xxx.xxx.xxx.xxx:443/index.php?option=com_janews&controller=../../../../../../../../../../etc/ passwd%00 rule-match="../../../../../../../../../../etc/passwd\x00" AttackCat="Unauthorized Remote File Access" summ="This allows an attacker to make an unauthorized attempt in downloading a file from a web server" sigid="9009" category="Information Disclosure--Predictable Resource Location" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36" show less	Hacking
🇮🇪 34.242.157.210	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 08:14:23" vp_time="2022-09-06 06:14:23 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-06 08:14:23" vp_time="2022-09-06 06:14:23 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=34.242.157.210 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: Cross-site Scripting (XSS) Attack" URI=xxx.xxx.xxx.xxx:443/zimbra/h/search?si=1&so=0&sfi=4&st=message&csi=1&action=& amp;cso=0&id=%22%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E rule-match="""></script><script>alert(document.domain)</script>" AttackCat="Cross-site Scripting (XSS) Attack" summ="XSS is a technique that forces a web site to echo attacker-supplied executable code, which loads in a user's browser" sigid="9008" category="Client-side Attacks--Cross-site Scripting" agent="Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36" show less	Hacking
🇩🇪 157.90.38.9	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-04 14:20:01" vp_time="2022-09-04 12:20:01 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-04 14:20:01" vp_time="2022-09-04 12:20:01 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=157.90.38.9 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇺🇸 64.5.123.66	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-04 02:51:06" vp_time="2022-09-04 00:51:06 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-04 02:51:06" vp_time="2022-09-04 00:51:06 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=64.5.123.66 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇩🇪 212.227.115.239	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-03 15:14:53" vp_time="2022-09-03 13:14:53 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-03 15:14:53" vp_time="2022-09-03 13:14:53 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=212.227.115.239 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" KIX 17.11.0-0 show less	SQL Injection
🇩🇪 185.194.141.178	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-03 03:51:04" vp_time="2022-09-03 01:51:04 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-03 03:51:04" vp_time="2022-09-03 01:51:04 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=185.194.141.178 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇺🇸 198.98.51.189	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-02 16:23:31" vp_time="2022-09-02 14:23:31 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-02 16:23:31" vp_time="2022-09-02 14:23:31 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=198.98.51.189 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇱🇺 107.189.28.241	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-02 04:50:35" vp_time="2022-09-02 02:50:35 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-02 04:50:35" vp_time="2022-09-02 02:50:35 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=107.189.28.241 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇩🇪 5.45.102.93	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 17:06:52" vp_time="2022-09-01 15:06:52 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 17:06:52" vp_time="2022-09-01 15:06:52 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=5.45.102.93 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇸🇪 171.25.193.80	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 05:16:00" vp_time="2022-09-01 03:16:00 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 05:16:00" vp_time="2022-09-01 03:16:00 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=171.25.193.80 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0" show less	SQL Injection
🇺🇸 64.227.100.210	15 Sep 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 04:38:11" vp_time="2022-09-01 02:38:11 UTC" fw=xxx.xxx ... show more SSLVPN: id=sslvpn sn=xxxxxx time="2022-09-01 04:38:11" vp_time="2022-09-01 02:38:11 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=64.227.100.210 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: SQL Injection Attack 1" URI=xxx.xxx.xxx.xxx:443/cgi-bin/extendauthentication rule-match="' union select usertype\|\|'#'\|\|sessionid\|\|'#'\|\|username\|\|'#'\|\|password\|\|'#'\|\|domainname from sessions limit 0,1;" AttackCat="SQL Injection Attack 1" summ="SQL Injection is an attack technique used to exploit web sites that construct SQL statements from user-supplied input" sigid="9005" category="Command Execution--SQL Injection" agent="Mozilla/5.0 (iPhone; CPU iPhone OS 14_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Mobile/15E148 Safari/604.1" show less	SQL Injection