• Apply these filters?
  • or Cancel

Ready to get started?

Click the button in the menu bar above to add a visualization to the dashboard.
If you haven't setup a visualization yet visit the "Visualize" tab to create your first visualization.

  • Top WAF Rules Table
    rule_id: Descending Count
    CFMISC0005 33,011
    981176 2,539
    100074 1,370
    100013 34
    100096HTML 22
    100009J 4
    100048 2
    100096BASE 1
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
       
    Export:   Raw     Formatted
  • WAF: Top 10 Hosts Attacked
    host: Descending Count
    www2.satuitcrm.com 36,026
    www4.satuitcrm.com 957
       
       
       
       
       
       
       
       
    Export:   Raw     Formatted
  • Average OWASP Score
    43.527
    Average anomaly_score
  • Top 10 Countries - WAF Events
    • us
    • gb
  • WAF: Event Count Log Graph
    Count
    0 500 1,000 1,500
    21:00 00:00 03:00 06:00 09:00 12:00 15:00
    timestamp per 30 minutes
    • Count
  • WAF: Top User Agents
    user_agent: Descending Count
    Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 4.0.30319.42000) 35,231
    Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 376
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 361
    Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 220
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 216
    Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko 111
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36 95
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 66
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 57
    Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.8935) 1
    Export:   Raw     Formatted
  • WAF: Top Client IPs
    client_ip: Descending Count
    100.0.49.67 36,397
    85.92.200.38 388
    97.96.98.36 91
    86.166.173.246 67
    38.102.52.210 21
    78.40.158.54 10
    38.104.122.82 6
    72.93.216.42 3
       
       
    Export:   Raw     Formatted
  • WAF Only
    Time http_method activated_rules ruleMessage action
    2018-09-19T18:29:24.320Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:29:29.340Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:29:29.450Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:30:27.280Z POST
    07, 100074, 04, 900018, 2000004, 2000003, 981018, uri-981173, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:31:17.300Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:31:17.430Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:31:17.740Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:31:20.580Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:31:36.260Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:31:58.100Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:32:17.480Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:32:18.260Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:32:18.340Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:32:19.940Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:33:30.070Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:35:58.560Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:35:58.730Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:35:58.770Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:36:01.560Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:37:03.470Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:37:03.590Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:37:25.510Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:37:25.600Z POST
    07, 100074, 04, 900018, 2000004, 981018, 2000003, 900002, 900021, 2000001, 2000006, 900004, 900006, 900001, 900012
    POST request with no body
    allow
    2018-09-19T18:37:26.930Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 981319, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981257, 981245, 981240, 981243, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 70, SQLi=31, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:27.220Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 981319, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981257, 981245, 981240, 981243, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 70, SQLi=31, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:27.870Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 981305, 981307, 981313, 981317, 950001, 959073, 981255, 981257, 981245, 981247B, 981243, uri-981317, 973338, 981136, 973300, 973335, 973334, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 83, SQLi=31, XSS=25): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:28.090Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981257, 981245, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 58, SQLi=27, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:33.830Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981245, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:37:41.570Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981245, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:37:41.780Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981245, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:37:41.940Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981244, 981257, 981245, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 63, SQLi=28, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:42.260Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981244, 981257, 981245, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 63, SQLi=28, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:42.400Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 959073, 981245, 973338, 981136, 973300, 973335, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 47, SQLi=17, XSS=20): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:42.780Z POST
    100001, 100004, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900021, 960015, 960009, 960024, 981133, 981318, 950901, 981301, 981305, 981307, 981317, 950001, 959073, 981244, 981257, 981245, uri-981317, 973338, 981136, 973300, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 63, SQLi=28, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:37:49.190Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:38:00.820Z POST
    100013, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960335, 960024, 981133, 950901, 981305, 981257, 981245, uri-981173, 981018, 973300, 973304, 973335, 973333, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 43, SQLi=9, XSS=20): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:38:01.540Z POST
    100074, 07, 04, 900001, 900002, 900004, 900006, 900012, 900018, 900021, uri-981173, 981018, 2000001, 2000003, 2000004, 2000006
    POST request with no body
    allow
    2018-09-19T18:38:07.710Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981301, 981304, 981305, 981307, 981317, 981257, 981245, 981243, uri-981317, 973338, 981136, 973333, 973344, 973332, 2000001, 2000003, 2000004, 2000006, 981176
    Inbound Anomaly Score Exceeded (Total Score: 56, SQLi=19, XSS=20): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:38:14.940Z POST
    100043, 981301, 2000001, 03, 900006, 981133, 981243, 973335, 959073, 900021, 981317, 2000003, 07, 981257, 960015, 960024, 900018, CFMISC0005, 900012, 981318, 973333, 973338, 950001, 981136, 981305, 900001, 2000004, uri-981317, 900004, 981307, 2000006, 950901, 981245, 981176, 900002
    Inbound Anomaly Score Exceeded (Total Score: 61, SQLi=28, XSS=15): Last Matched Message: IE XSS Filters - Attack Detected.
    allow
    2018-09-19T18:38:15.600Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:15.730Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.090Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.210Z POST
    07, 100043, 960015, 960024, 900018, 2000001, CFMISC0005, 900012, 900006, 981318, 981243, 973333, 973338, 981245, 900001, 2000004, 900002, 981136, 900021, 03, 2000006, 950901, 900004, 2000003, 981133
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.460Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.620Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.790Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:19.920Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:20.060Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:20.150Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
    2018-09-19T18:38:20.300Z POST
    100043, CFMISC0005, 07, 03, 900001, 900002, 900004, 900006, 900012, 900018, 900021, 960015, 960024, 981133, 981318, 950901, 981245, 981243, 973338, 981136, 973333, 2000001, 2000003, 2000004, 2000006
    Block requests with empty or no Accept header value
    allow
  • WAF Top 10 uri
    uri: Descending Count
    /Live/SatuitCRM_XML_API.asmx 35,231
    /Live/Services/SiteConfigurationService.asmx/GetGlobalConfigFields 325
    /live/satuitcrm_xml_api.asmx 214
    /Live/Services/Search.asmx/GetFastFindColumnTitles 176
    /Live/Services/Search.asmx/GetFastFindOptions 176
    /Live/Services/User.asmx/GetUIDefaults 95
    /Live/Services/Grids.asmx/GetRecycleBinDataCount 69
    /testmarathon/satuitcrm_xml_api.asmx 32
    /Live/Services/GDL.asmx/GetGDLFolders 23
    /Live/Services/PacServices.asmx/GetAvailableSpace 23
    /Live/Services/EmailTemplatesSvc.asmx/GetDataForPreview 18
    /GQG/Services/Grids.asmx/GetQueuedItems 17
    /NewForests/Services/SiteConfigurationService.asmx/GetProductLicenseCounts 15
    /Live/Services/SystemAdministration.asmx/FetchRoles 14
    /SatuitCRM01/Services/SiteConfigurationService.asmx/GetProductLicenseCounts 14
    /HeritageInvestors/Services/Browselist.asmx/HasBrowseList 13
    /SineWave/Services/SiteConfigurationService.asmx/GetProductLicenseCounts 13
    /CSSatuitCRM151/Services/SiteConfigurationService.asmx/GetGlobalConfigFields 12
    /Live/Services/EmailTemplatesSvc.asmx/GetDataForQuickSend 12
    /GQG/Services/Report.asmx/GetReportFolders 11
    Export:   Raw     Formatted
  • action
    action: Descending Count
    allow 36,983
       
       
       
       
       
       
       
       
       
    Export:   Raw     Formatted
  • All Events
    Time _type rule_id action client_ip
    2018-09-20T18:29:03.880Z waf 981176 allow 100.0.49.67
    2018-09-20T18:29:01.070Z waf 981176 allow 100.0.49.67
    2018-09-20T18:24:39.310Z waf CFMISC0005 allow 100.0.49.67
    2018-09-20T18:24:24.330Z waf 100074 allow 100.0.49.67
    2018-09-20T18:24:24.300Z waf 100074 allow 100.0.49.67
    2018-09-20T18:24:24.100Z waf 100074 allow 100.0.49.67
    2018-09-20T18:23:20.240Z waf 100074 allow 100.0.49.67
    2018-09-20T18:23:20.200Z waf 100074 allow 100.0.49.67
    2018-09-20T18:23:20.050Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:56.130Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:56.030Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:30.810Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:30.780Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:30.610Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:20.080Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:20.010Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:03.070Z waf 100074 allow 100.0.49.67
    2018-09-20T18:22:00.190Z waf 100096HTML allow 100.0.49.67
    2018-09-20T18:21:38.580Z waf 100074 allow 100.0.49.67
    2018-09-20T18:21:38.540Z waf 100074 allow 100.0.49.67
    2018-09-20T18:21:38.410Z waf 100074 allow 100.0.49.67
    2018-09-20T18:20:54.160Z waf 100096HTML allow 100.0.49.67
    2018-09-20T18:20:43.610Z waf 981176 allow 100.0.49.67
    2018-09-20T18:20:18.380Z waf 100074 allow 100.0.49.67
    2018-09-20T18:20:18.340Z waf 100074 allow 100.0.49.67
    2018-09-20T18:20:18.210Z waf 100074 allow 100.0.49.67
    2018-09-20T18:20:05.330Z waf 100074 allow 100.0.49.67
    2018-09-20T18:19:28.870Z waf 100074 allow 100.0.49.67
    2018-09-20T18:18:46.530Z waf 100074 allow 100.0.49.67
    2018-09-20T18:18:27.390Z waf 100074 allow 100.0.49.67
    2018-09-20T18:17:10.420Z waf 100074 allow 100.0.49.67
    2018-09-20T18:17:10.310Z waf 100074 allow 100.0.49.67
    2018-09-20T18:17:03.130Z waf 100074 allow 100.0.49.67
    2018-09-20T18:17:03.130Z waf 100074 allow 100.0.49.67
    2018-09-20T18:17:03.130Z waf 100074 allow 100.0.49.67
    2018-09-20T18:16:16.510Z waf 100074 allow 97.96.98.36
    2018-09-20T18:16:16.450Z waf 100074 allow 97.96.98.36
    2018-09-20T18:16:16.100Z waf 100074 allow 97.96.98.36
    2018-09-20T18:16:00.880Z waf 100074 allow 100.0.49.67
    2018-09-20T18:15:59.570Z waf 981176 allow 100.0.49.67
    2018-09-20T18:15:45.300Z waf 100074 allow 97.96.98.36
    2018-09-20T18:15:45.270Z waf 100074 allow 97.96.98.36
    2018-09-20T18:15:45.080Z waf 100074 allow 97.96.98.36
    2018-09-20T18:15:39.430Z waf 100074 allow 100.0.49.67
    2018-09-20T18:15:35.320Z waf CFMISC0005 allow 100.0.49.67
    2018-09-20T18:15:33.070Z waf 981176 allow 100.0.49.67
    2018-09-20T18:15:22.350Z waf CFMISC0005 allow 100.0.49.67
    2018-09-20T18:15:20.200Z waf 981176 allow 100.0.49.67
    2018-09-20T18:15:19.710Z waf 981176 allow 100.0.49.67
    2018-09-20T18:13:35.180Z waf 100074 allow 100.0.49.67