-
Notifications
You must be signed in to change notification settings - Fork 0
/
yy.txt
600 lines (600 loc) · 502 KB
/
yy.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
{"ckTime":"2021-09-15 13:33:32","country":"Tajikistan","email":"[email protected]","fixString":"3741961371","flag":"1100","game":"partseem648","name":"Ondricka7941","numberFloat":9.698631812345813,"numberInt":67,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 00:07:37","country":"Bhutan","email":"[email protected]","fixString":"5580388331","flag":"232","game":"congressrealize177","name":"Macejkovic4635","numberFloat":-15.37971192391372,"numberInt":17,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-03 03:04:04","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"2230605627","flag":"122","game":"springchallenge194","name":"Frami4458","numberFloat":8.65637881422014,"numberInt":-6,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-07 06:50:23","country":"Brazil","email":"[email protected]","fixString":"9618889050","flag":"232","game":"seriesdefine250","name":"Labadie9379","numberFloat":-18.49747306008756,"numberInt":196,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 01:54:54","country":"Mexico","email":"[email protected]","fixString":"2685488366","flag":"122","game":"princeintroduce317","name":"Toy3826","numberFloat":17.13998728956655,"numberInt":29,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-28 22:27:48","country":"Bhutan","email":"[email protected]","fixString":"2444081514","flag":"232","game":"diseasewould123","name":"Waters7661","numberFloat":4.063993059684069,"numberInt":51,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-22 20:34:35","country":"Tajikistan","email":"[email protected]","fixString":"1386547743","flag":"1100","game":"princeintroduce317","name":"Bashirian9137","numberFloat":2.6516512405330204,"numberInt":55,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-09 16:03:38","country":"Gabon","email":"[email protected]","fixString":"9875871051","flag":"122","game":"congressrealize177","name":"Waters7661","numberFloat":-11.403508255458323,"numberInt":184,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-02 10:37:31","country":"Norway","email":"[email protected]","fixString":"0530338229","flag":"122","game":"diseasewould123","name":"Kshlerin6544","numberFloat":-8.950472941047613,"numberInt":52,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 20:24:19","country":"Brazil","email":"[email protected]","fixString":"9613621280","flag":"232","game":"incomethink708","name":"Gislason1692","numberFloat":-17.10391622496488,"numberInt":135,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 22:04:31","country":"Togo","email":"[email protected]","fixString":"9461603746","flag":"1100","game":"partseem648","name":"Gislason1692","numberFloat":-11.857233367850007,"numberInt":126,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-05 23:06:48","country":"Gabon","email":"[email protected]","fixString":"3179355725","flag":"232","game":"congressrealize177","name":"Considine2380","numberFloat":20.021331885172824,"numberInt":33,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-14 10:50:00","country":"British Virgin Islands","email":"[email protected]","fixString":"5757498899","flag":"232","game":"spottalk16","name":"Smitham3531","numberFloat":16.78780170929308,"numberInt":184,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-10 14:09:36","country":"Tajikistan","email":"[email protected]","fixString":"7673431400","flag":"122","game":"techniquerecognize820","name":"Bosco7026","numberFloat":-11.832180104150552,"numberInt":79,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 05:49:08","country":"Norway","email":"[email protected]","fixString":"2417873511","flag":"1100","game":"seriesdefine250","name":"Kreiger5052","numberFloat":-10.617945036531362,"numberInt":68,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-24 18:55:54","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"5254045775","flag":"232","game":"springchallenge194","name":"King8991","numberFloat":11.6268756251716,"numberInt":-4,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 06:54:52","country":"Norway","email":"[email protected]","fixString":"6546227692","flag":"1100","game":"seriesdefine250","name":"Murazik6553","numberFloat":-1.1041803944325785,"numberInt":61,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-08 21:40:27","country":"Mexico","email":"[email protected]","fixString":"9266464022","flag":"aad","game":"springchallenge194","name":"Orn8933","numberFloat":-8.062332153821231,"numberInt":137,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-03 03:04:04","country":"Norway","email":"[email protected]","fixString":"8295848429","flag":"aad","game":"seriesdefine250","name":"Kling6873","numberFloat":15.136898715297637,"numberInt":180,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 02:24:29","country":"Togo","email":"[email protected]","fixString":"5262482094","flag":"232","game":"partseem648","name":"Hermiston9891","numberFloat":-0.23613398908035066,"numberInt":79,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 01:54:54","country":"Bhutan","email":"[email protected]","fixString":"9070601929","flag":"232","game":"incomethink708","name":"Morissette3770","numberFloat":-7.867931363910122,"numberInt":198,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 03:24:28","country":"Mexico","email":"[email protected]","fixString":"5399417538","flag":"aad","game":"diseasewould123","name":"Bosco7026","numberFloat":-10.728969912254236,"numberInt":58,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-09 03:55:47","country":"French Southern Territories","email":"[email protected]","fixString":"7946179825","flag":"aad","game":"seriesdefine250","name":"Wunsch5124","numberFloat":-8.424379411122462,"numberInt":60,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 01:54:55","country":"French Southern Territories","email":"[email protected]","fixString":"1116755883","flag":"122","game":"techniquerecognize820","name":"Moen8554","numberFloat":5.890077122978063,"numberInt":99,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-17 08:34:48","country":"Bhutan","email":"[email protected]","fixString":"7985334831","flag":"232","game":"incomethink708","name":"Mayert5107","numberFloat":-19.035707713615718,"numberInt":70,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 18:05:10","country":"Mexico","email":"[email protected]","fixString":"0253934650","flag":"1100","game":"seriesdefine250","name":"Roberts5934","numberFloat":3.452132712421303,"numberInt":157,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-16 12:10:16","country":"Togo","email":"[email protected]","fixString":"4805601865","flag":"aad","game":"seriesdefine250","name":"Roberts5934","numberFloat":-5.566970690823174,"numberInt":6,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-05 23:06:48","country":"Mexico","email":"[email protected]","fixString":"3362546163","flag":"232","game":"incomethink708","name":"Kling6873","numberFloat":4.999435762474384,"numberInt":92,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 01:54:54","country":"Tajikistan","email":"[email protected]","fixString":"6116539598","flag":"122","game":"incomethink708","name":"Reilly9468","numberFloat":-10.611439780924092,"numberInt":111,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 09:46:25","country":"Bhutan","email":"[email protected]","fixString":"9853783147","flag":"232","game":"techniquerecognize820","name":"Dibbert5407","numberFloat":-19.82264022675781,"numberInt":62,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-26 00:31:16","country":"Brazil","email":"[email protected]","fixString":"5831787321","flag":"aad","game":"showarrange149","name":"Hoppe7485","numberFloat":16.580578835105708,"numberInt":15,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-10 14:09:36","country":"Brazil","email":"[email protected]","fixString":"5240872700","flag":"1100","game":"springchallenge194","name":"Mayert5107","numberFloat":16.650487335821378,"numberInt":142,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 20:24:19","country":"Brazil","email":"[email protected]","fixString":"9254975202","flag":"232","game":"springchallenge194","name":"Baumbach3471","numberFloat":7.978745839884322,"numberInt":40,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 00:07:37","country":"Togo","email":"[email protected]","fixString":"1058203401","flag":"232","game":"showarrange149","name":"Frami4458","numberFloat":0.6802222873306114,"numberInt":19,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-22 20:34:35","country":"Gabon","email":"[email protected]","fixString":"8923922128","flag":"122","game":"springchallenge194","name":"Nitzsche8842","numberFloat":10.65579432345227,"numberInt":72,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-15 10:10:24","country":"Brazil","email":"[email protected]","fixString":"2132004357","flag":"aad","game":"seriesdefine250","name":"Prosacco3916","numberFloat":3.6474550646234327,"numberInt":91,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-22 06:25:44","country":"Bhutan","email":"[email protected]","fixString":"8489657706","flag":"232","game":"partseem648","name":"Rice9839","numberFloat":-11.898598445196725,"numberInt":188,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-28 09:28:15","country":"Mexico","email":"[email protected]","fixString":"1820377160","flag":"232","game":"diseasewould123","name":"Sporer5579","numberFloat":15.363397112447405,"numberInt":118,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 12:22:39","country":"Togo","email":"[email protected]","fixString":"3183254341","flag":"122","game":"incomethink708","name":"Shanahan5524","numberFloat":7.970358451397026,"numberInt":55,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-03 02:43:12","country":"Gabon","email":"[email protected]","fixString":"5536289418","flag":"1100","game":"seriesdefine250","name":"Walker1467","numberFloat":-7.305385909627221,"numberInt":8,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"Norway","email":"[email protected]","fixString":"9895382653","flag":"1100","game":"princeintroduce317","name":"Lynch2615","numberFloat":3.6675217308582333,"numberInt":72,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-30 15:39:07","country":"Bhutan","email":"[email protected]","fixString":"4834498815","flag":"122","game":"spottalk16","name":"Sporer5579","numberFloat":-7.639306321198715,"numberInt":64,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-26 00:41:17","country":"Brazil","email":"[email protected]","fixString":"7671329614","flag":"232","game":"incomethink708","name":"Baumbach3471","numberFloat":-16.920299390621928,"numberInt":109,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-09 16:03:38","country":"British Virgin Islands","email":"[email protected]","fixString":"7400413437","flag":"aad","game":"techniquerecognize820","name":"Frami4458","numberFloat":12.575132597653504,"numberInt":46,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-27 17:06:12","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"5858812482","flag":"aad","game":"spottalk16","name":"Kshlerin3181","numberFloat":-3.3609303792002336,"numberInt":154,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-22 06:25:44","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"2793879657","flag":"122","game":"spottalk16","name":"Roberts5934","numberFloat":-18.187839553358973,"numberInt":85,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 02:58:17","country":"Mexico","email":"[email protected]","fixString":"7523599824","flag":"232","game":"showarrange149","name":"Gulgowski3221","numberFloat":-2.877892280768595,"numberInt":28,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 19:55:58","country":"Brazil","email":"[email protected]","fixString":"7633384742","flag":"122","game":"techniquerecognize820","name":"Herman3103","numberFloat":14.710339927662556,"numberInt":35,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-06 21:27:21","country":"Togo","email":"[email protected]","fixString":"2057307720","flag":"232","game":"diseasewould123","name":"Wunsch5077","numberFloat":-8.832628806521443,"numberInt":144,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 17:14:57","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"9951504491","flag":"232","game":"princeintroduce317","name":"Labadie9379","numberFloat":-7.754897128050317,"numberInt":48,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 17:14:57","country":"Togo","email":"[email protected]","fixString":"6707934528","flag":"122","game":"techniquerecognize820","name":"Wunsch5077","numberFloat":2.44768517129625,"numberInt":79,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 12:22:39","country":"British Virgin Islands","email":"[email protected]","fixString":"7268477275","flag":"aad","game":"congressrealize177","name":"Smitham1004","numberFloat":-16.73562012577433,"numberInt":30,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-29 07:48:37","country":"Togo","email":"[email protected]","fixString":"2004556146","flag":"1100","game":"spottalk16","name":"Haley7820","numberFloat":-3.307442417993826,"numberInt":181,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 15:11:47","country":"Norway","email":"[email protected]","fixString":"9799436888","flag":"232","game":"seriesdefine250","name":"Erdman9812","numberFloat":10.620395030079933,"numberInt":110,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 06:54:52","country":"Tajikistan","email":"[email protected]","fixString":"8127615725","flag":"aad","game":"congressrealize177","name":"Fadel9711","numberFloat":1.2302709723502048,"numberInt":121,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 15:11:47","country":"Norway","email":"[email protected]","fixString":"6077384161","flag":"232","game":"spottalk16","name":"Jones8173","numberFloat":2.0468983898399813,"numberInt":9,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-17 08:34:48","country":"Bhutan","email":"[email protected]","fixString":"0164424625","flag":"1100","game":"diseasewould123","name":"Wuckert6028","numberFloat":-19.70639911581803,"numberInt":70,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-24 18:55:54","country":"Norway","email":"[email protected]","fixString":"0476127525","flag":"aad","game":"showarrange149","name":"Walter7984","numberFloat":-18.071193372920625,"numberInt":7,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 08:53:56","country":"Togo","email":"[email protected]","fixString":"5193971505","flag":"aad","game":"diseasewould123","name":"Tremblay1989","numberFloat":16.493664920912973,"numberInt":56,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 19:55:58","country":"Mexico","email":"[email protected]","fixString":"1397897776","flag":"122","game":"springchallenge194","name":"Wunsch5077","numberFloat":16.515561026216897,"numberInt":1,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 01:48:59","country":"British Virgin Islands","email":"[email protected]","fixString":"3028967801","flag":"1100","game":"showarrange149","name":"Kshlerin3181","numberFloat":11.996061639030014,"numberInt":183,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 02:58:17","country":"Norway","email":"[email protected]","fixString":"6952238211","flag":"aad","game":"partseem648","name":"Jewess8312","numberFloat":5.24242879511127,"numberInt":34,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 10:48:05","country":"Mexico","email":"[email protected]","fixString":"7082948837","flag":"1100","game":"incomethink708","name":"Prosacco3916","numberFloat":-1.5233572534002526,"numberInt":4,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 10:48:05","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"4867809224","flag":"122","game":"techniquerecognize820","name":"Jast2524","numberFloat":6.298311533198788,"numberInt":179,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-22 02:48:37","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"6516606379","flag":"122","game":"showarrange149","name":"Heidenreich4922","numberFloat":-10.66141382423166,"numberInt":66,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-14 10:50:00","country":"Gabon","email":"[email protected]","fixString":"2185116512","flag":"aad","game":"congressrealize177","name":"Kshlerin6544","numberFloat":6.247932300444823,"numberInt":179,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-16 12:10:16","country":"Togo","email":"[email protected]","fixString":"5121918548","flag":"232","game":"incomethink708","name":"McDermott3220","numberFloat":18.15480441028679,"numberInt":6,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 05:49:08","country":"Brazil","email":"[email protected]","fixString":"4756904509","flag":"aad","game":"incomethink708","name":"Morissette3770","numberFloat":-18.448109267497188,"numberInt":196,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 05:49:08","country":"British Virgin Islands","email":"[email protected]","fixString":"0033195724","flag":"232","game":"techniquerecognize820","name":"Heidenreich4922","numberFloat":8.859836994840872,"numberInt":83,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 05:12:16","country":"Norway","email":"[email protected]","fixString":"4741034319","flag":"1100","game":"princeintroduce317","name":"Wunsch8247","numberFloat":16.857417439841807,"numberInt":138,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 19:55:58","country":"Togo","email":"[email protected]","fixString":"8547638496","flag":"1100","game":"incomethink708","name":"Gulgowski3221","numberFloat":-6.032772214434033,"numberInt":34,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 08:29:27","country":"Norway","email":"[email protected]","fixString":"4383519066","flag":"aad","game":"showarrange149","name":"Erdman9812","numberFloat":-11.118196292163129,"numberInt":186,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-30 15:39:07","country":"Togo","email":"[email protected]","fixString":"5000492752","flag":"aad","game":"congressrealize177","name":"Connelly2236","numberFloat":3.545927295339112,"numberInt":178,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 04:58:36","country":"British Virgin Islands","email":"[email protected]","fixString":"9293213302","flag":"122","game":"princeintroduce317","name":"Schultz9206","numberFloat":-2.5008733714939204,"numberInt":42,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-22 06:25:44","country":"French Southern Territories","email":"[email protected]","fixString":"2574012440","flag":"122","game":"spottalk16","name":"Smitham3531","numberFloat":1.2969455845781646,"numberInt":61,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-28 22:27:48","country":"Tajikistan","email":"[email protected]","fixString":"7782894290","flag":"1100","game":"techniquerecognize820","name":"Funk3010","numberFloat":12.077165744456256,"numberInt":-5,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-09 03:55:47","country":"Mexico","email":"[email protected]","fixString":"4587917389","flag":"122","game":"seriesdefine250","name":"Kshlerin6544","numberFloat":-14.900672773533005,"numberInt":30,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 00:11:32","country":"French Southern Territories","email":"[email protected]","fixString":"3926400741","flag":"122","game":"congressrealize177","name":"Schultz9206","numberFloat":-4.973060340683764,"numberInt":59,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-06 21:27:21","country":"Norway","email":"[email protected]","fixString":"5134332921","flag":"232","game":"congressrealize177","name":"Kub2316","numberFloat":-9.822766464382452,"numberInt":-6,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 00:07:37","country":"French Southern Territories","email":"[email protected]","fixString":"2386230293","flag":"1100","game":"incomethink708","name":"Ziemann2086","numberFloat":11.648832029308373,"numberInt":105,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 00:23:12","country":"Gabon","email":"[email protected]","fixString":"0230187832","flag":"122","game":"princeintroduce317","name":"Connelly2236","numberFloat":-3.641638024440695,"numberInt":195,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-30 14:12:25","country":"Brazil","email":"[email protected]","fixString":"4784450568","flag":"1100","game":"partseem648","name":"Bosco7026","numberFloat":10.283769376014725,"numberInt":125,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 10:48:05","country":"French Southern Territories","email":"[email protected]","fixString":"0188903372","flag":"1100","game":"spottalk16","name":"Tremblay1989","numberFloat":-18.955049167721384,"numberInt":72,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 20:00:45","country":"Mexico","email":"[email protected]","fixString":"8872940205","flag":"232","game":"congressrealize177","name":"Bosco7026","numberFloat":-10.297181756017915,"numberInt":7,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-13 04:56:33","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"5335593818","flag":"1100","game":"showarrange149","name":"McDermott3220","numberFloat":-0.004800685683989059,"numberInt":88,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 01:54:55","country":"Mexico","email":"[email protected]","fixString":"0738580093","flag":"aad","game":"showarrange149","name":"Schulist7113","numberFloat":-0.8496289055768713,"numberInt":-4,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-09 16:03:38","country":"Bhutan","email":"[email protected]","fixString":"9030182875","flag":"1100","game":"partseem648","name":"Feeney3457","numberFloat":-3.3132785833251326,"numberInt":175,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 01:42:00","country":"Norway","email":"[email protected]","fixString":"7906916826","flag":"1100","game":"incomethink708","name":"Smitham1004","numberFloat":-8.86156629449037,"numberInt":63,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-26 00:31:16","country":"Bhutan","email":"[email protected]","fixString":"2799764598","flag":"122","game":"springchallenge194","name":"Toy3826","numberFloat":18.741454426564555,"numberInt":178,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 02:24:29","country":"Brazil","email":"[email protected]","fixString":"4990995912","flag":"1100","game":"partseem648","name":"Macejkovic4635","numberFloat":-15.820059505633429,"numberInt":66,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 04:58:36","country":"Mexico","email":"[email protected]","fixString":"8429242736","flag":"1100","game":"springchallenge194","name":"Jewess8312","numberFloat":14.87264390937737,"numberInt":143,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 19:50:09","country":"British Virgin Islands","email":"[email protected]","fixString":"0404566325","flag":"1100","game":"incomethink708","name":"Watsica2190","numberFloat":17.04902850925841,"numberInt":155,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-06 19:29:20","country":"Norway","email":"[email protected]","fixString":"2022661333","flag":"232","game":"seriesdefine250","name":"Dooley4984","numberFloat":17.03343453528746,"numberInt":187,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 13:49:02","country":"French Southern Territories","email":"[email protected]","fixString":"4977298194","flag":"122","game":"spottalk16","name":"Ziemann2086","numberFloat":-6.035127411654324,"numberInt":0,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"Gabon","email":"[email protected]","fixString":"3955903855","flag":"122","game":"springchallenge194","name":"Walter7984","numberFloat":-14.709404656006917,"numberInt":124,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-28 20:04:23","country":"Mexico","email":"[email protected]","fixString":"8772115993","flag":"122","game":"showarrange149","name":"Lynch2615","numberFloat":8.708059962853294,"numberInt":71,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-15 11:38:08","country":"Mexico","email":"[email protected]","fixString":"0644987519","flag":"122","game":"princeintroduce317","name":"Rice9839","numberFloat":19.98284631458812,"numberInt":50,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"Mexico","email":"[email protected]","fixString":"7856477304","flag":"232","game":"congressrealize177","name":"Fadel9711","numberFloat":17.898641756313662,"numberInt":4,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 00:11:32","country":"Gabon","email":"[email protected]","fixString":"0241208515","flag":"aad","game":"partseem648","name":"Schultz9206","numberFloat":-18.52764905613577,"numberInt":82,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 20:12:29","country":"Togo","email":"[email protected]","fixString":"2236623229","flag":"232","game":"techniquerecognize820","name":"Huel8444","numberFloat":2.8353384154847525,"numberInt":187,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 19:34:42","country":"Tajikistan","email":"[email protected]","fixString":"6157289314","flag":"232","game":"partseem648","name":"Padberg7143","numberFloat":16.719854852445362,"numberInt":150,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-23 21:50:54","country":"Bhutan","email":"[email protected]","fixString":"6636554047","flag":"232","game":"congressrealize177","name":"Deckow3699","numberFloat":-12.489223917995123,"numberInt":-5,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-07 22:54:01","country":"Togo","email":"[email protected]","fixString":"5872241632","flag":"122","game":"congressrealize177","name":"Wunsch5077","numberFloat":-11.629650821042553,"numberInt":46,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 01:48:59","country":"Bhutan","email":"[email protected]","fixString":"1155784904","flag":"122","game":"springchallenge194","name":"Haley7820","numberFloat":-7.020373575167442,"numberInt":61,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-05 23:06:48","country":"French Southern Territories","email":"[email protected]","fixString":"2184806925","flag":"aad","game":"incomethink708","name":"Reilly9468","numberFloat":-8.612218878176753,"numberInt":165,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 16:58:25","country":"Brazil","email":"[email protected]","fixString":"9329673532","flag":"232","game":"diseasewould123","name":"Funk3010","numberFloat":-10.00718842793747,"numberInt":33,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 10:48:05","country":"French Southern Territories","email":"[email protected]","fixString":"4789027133","flag":"122","game":"diseasewould123","name":"Eichmann8529","numberFloat":-3.228239450270422,"numberInt":8,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 04:58:36","country":"Brazil","email":"[email protected]","fixString":"5741332899","flag":"1100","game":"springchallenge194","name":"Skiles6473","numberFloat":7.009696585655469,"numberInt":18,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 18:05:10","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"5230590441","flag":"aad","game":"princeintroduce317","name":"Cronin7869","numberFloat":-16.036900157694422,"numberInt":184,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-26 00:41:17","country":"Brazil","email":"[email protected]","fixString":"3409635061","flag":"1100","game":"seriesdefine250","name":"Labadie9379","numberFloat":-4.347386163720536,"numberInt":71,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-08 07:05:49","country":"British Virgin Islands","email":"[email protected]","fixString":"5963227297","flag":"1100","game":"incomethink708","name":"Ondricka7941","numberFloat":3.9267141819104623,"numberInt":150,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 05:12:16","country":"Tajikistan","email":"[email protected]","fixString":"3537678502","flag":"122","game":"showarrange149","name":"Fadel9711","numberFloat":15.465575028101338,"numberInt":49,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-22 02:48:37","country":"French Southern Territories","email":"[email protected]","fixString":"0601568225","flag":"1100","game":"springchallenge194","name":"Zboncak5214","numberFloat":7.669923045429389,"numberInt":95,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 03:24:28","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"3372188113","flag":"aad","game":"diseasewould123","name":"Armstrong6544","numberFloat":-7.184944180992263,"numberInt":181,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 05:12:16","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"7286295857","flag":"232","game":"seriesdefine250","name":"Murazik6553","numberFloat":10.310163439953048,"numberInt":199,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-25 14:10:35","country":"Togo","email":"[email protected]","fixString":"6492895336","flag":"122","game":"springchallenge194","name":"Kub2316","numberFloat":-9.953176216307957,"numberInt":189,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 01:54:55","country":"Gabon","email":"[email protected]","fixString":"9025570020","flag":"232","game":"springchallenge194","name":"Sauer3507","numberFloat":-11.613896498548746,"numberInt":129,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-17 08:34:48","country":"British Virgin Islands","email":"[email protected]","fixString":"4548586279","flag":"232","game":"partseem648","name":"Watsica2190","numberFloat":4.866404319856493,"numberInt":33,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 10:48:05","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"1724969682","flag":"232","game":"diseasewould123","name":"Veum6259","numberFloat":-2.6934961846671293,"numberInt":95,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-22 11:51:20","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"2612024208","flag":"1100","game":"seriesdefine250","name":"Schultz9206","numberFloat":19.739738954417394,"numberInt":13,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 08:29:27","country":"Brazil","email":"[email protected]","fixString":"8498250026","flag":"aad","game":"showarrange149","name":"Gislason1692","numberFloat":-18.13222027713577,"numberInt":94,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-25 16:26:24","country":"Norway","email":"[email protected]","fixString":"7456668932","flag":"232","game":"princeintroduce317","name":"Shanahan5524","numberFloat":19.147845298183295,"numberInt":9,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 02:58:17","country":"Gabon","email":"[email protected]","fixString":"2860970130","flag":"aad","game":"congressrealize177","name":"Jones8173","numberFloat":-9.956104440334148,"numberInt":156,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-24 05:49:53","country":"French Southern Territories","email":"[email protected]","fixString":"7323205060","flag":"1100","game":"techniquerecognize820","name":"Predovic2309","numberFloat":-14.542571637849035,"numberInt":85,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-07 06:50:23","country":"Brazil","email":"[email protected]","fixString":"8912274840","flag":"1100","game":"seriesdefine250","name":"Funk3010","numberFloat":19.365766200713022,"numberInt":28,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 20:00:45","country":"Togo","email":"[email protected]","fixString":"2998361201","flag":"232","game":"seriesdefine250","name":"Labadie9379","numberFloat":7.7647643923854694,"numberInt":-10,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-21 03:55:17","country":"Bhutan","email":"[email protected]","fixString":"0818521140","flag":"232","game":"partseem648","name":"Dooley4984","numberFloat":0.7182526650100876,"numberInt":2,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-25 16:26:24","country":"British Virgin Islands","email":"[email protected]","fixString":"7616726698","flag":"122","game":"springchallenge194","name":"Walker1467","numberFloat":-10.787610975607718,"numberInt":111,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-15 11:38:08","country":"Tajikistan","email":"[email protected]","fixString":"7760212891","flag":"aad","game":"showarrange149","name":"Gislason3246","numberFloat":10.16621694585589,"numberInt":-9,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-29 07:48:37","country":"French Southern Territories","email":"[email protected]","fixString":"8473424075","flag":"232","game":"diseasewould123","name":"Wolff9630","numberFloat":16.896236143531677,"numberInt":50,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 05:49:08","country":"Togo","email":"[email protected]","fixString":"0423266770","flag":"122","game":"princeintroduce317","name":"Huel8444","numberFloat":-19.350841110893832,"numberInt":63,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-25 14:10:35","country":"Mexico","email":"[email protected]","fixString":"4395436813","flag":"1100","game":"partseem648","name":"Bashirian9137","numberFloat":-8.61727639575494,"numberInt":53,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"British Virgin Islands","email":"[email protected]","fixString":"4132136055","flag":"122","game":"congressrealize177","name":"Huel8444","numberFloat":16.6075867912356,"numberInt":193,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-08 22:53:07","country":"Tajikistan","email":"[email protected]","fixString":"9087187189","flag":"aad","game":"techniquerecognize820","name":"Murray8953","numberFloat":16.727395413846697,"numberInt":37,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 02:24:29","country":"Bhutan","email":"[email protected]","fixString":"9061758072","flag":"122","game":"seriesdefine250","name":"Skiles6473","numberFloat":15.433136051471411,"numberInt":107,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-19 19:55:58","country":"Gabon","email":"[email protected]","fixString":"3090542429","flag":"232","game":"partseem648","name":"Kohler4448","numberFloat":9.627948320345908,"numberInt":98,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-14 10:50:00","country":"French Southern Territories","email":"[email protected]","fixString":"9956125482","flag":"122","game":"incomethink708","name":"Watsica2190","numberFloat":17.138159058422172,"numberInt":119,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 00:11:32","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"9702025914","flag":"232","game":"showarrange149","name":"Murray8953","numberFloat":13.546535050362326,"numberInt":8,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-15 10:10:24","country":"Bhutan","email":"[email protected]","fixString":"8639287964","flag":"aad","game":"spottalk16","name":"Baumbach3471","numberFloat":4.508251604282233,"numberInt":191,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-19 21:41:38","country":"British Virgin Islands","email":"[email protected]","fixString":"2316095233","flag":"122","game":"showarrange149","name":"Feeney3457","numberFloat":-6.728223700901431,"numberInt":184,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-30 15:39:07","country":"Tajikistan","email":"[email protected]","fixString":"2815155677","flag":"122","game":"congressrealize177","name":"Moen8554","numberFloat":13.502103695591433,"numberInt":184,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 20:24:19","country":"French Southern Territories","email":"[email protected]","fixString":"8746086044","flag":"1100","game":"techniquerecognize820","name":"Ondricka7941","numberFloat":16.47987217914663,"numberInt":149,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-30 14:12:25","country":"Brazil","email":"[email protected]","fixString":"0617295949","flag":"1100","game":"princeintroduce317","name":"Will7976","numberFloat":-18.90096716383877,"numberInt":155,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-25 15:19:52","country":"Brazil","email":"[email protected]","fixString":"6042259685","flag":"232","game":"congressrealize177","name":"Smitham3531","numberFloat":17.512851707383984,"numberInt":27,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 06:54:52","country":"Brazil","email":"[email protected]","fixString":"4754071532","flag":"232","game":"spottalk16","name":"Armstrong6544","numberFloat":7.553335454884412,"numberInt":65,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 01:48:59","country":"Mexico","email":"[email protected]","fixString":"2368233873","flag":"1100","game":"springchallenge194","name":"Jewess8312","numberFloat":0.5926046917570496,"numberInt":125,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-31 09:46:25","country":"Bhutan","email":"[email protected]","fixString":"2879929267","flag":"1100","game":"diseasewould123","name":"Sporer5579","numberFloat":-6.471296615131303,"numberInt":14,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-30 07:32:12","country":"French Southern Territories","email":"[email protected]","fixString":"3713340416","flag":"232","game":"congressrealize177","name":"Baumbach3471","numberFloat":3.823029662081204,"numberInt":200,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 19:50:09","country":"Tajikistan","email":"[email protected]","fixString":"9433094627","flag":"1100","game":"princeintroduce317","name":"Murazik6553","numberFloat":14.75928028784369,"numberInt":1,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-17 08:34:48","country":"Bhutan","email":"[email protected]","fixString":"1030491004","flag":"aad","game":"spottalk16","name":"Hintz7168","numberFloat":5.340064291425488,"numberInt":34,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-02 10:37:31","country":"Brazil","email":"[email protected]","fixString":"2623697343","flag":"122","game":"showarrange149","name":"Will7976","numberFloat":-14.094039361315103,"numberInt":42,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-20 13:37:33","country":"Togo","email":"[email protected]","fixString":"2720062812","flag":"232","game":"spottalk16","name":"Dibbert5407","numberFloat":7.084424129214842,"numberInt":167,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-08 21:40:27","country":"Togo","email":"[email protected]","fixString":"8579450813","flag":"1100","game":"incomethink708","name":"Hintz7168","numberFloat":17.251701285921104,"numberInt":100,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-26 00:35:10","country":"Norway","email":"[email protected]","fixString":"2227428054","flag":"1100","game":"diseasewould123","name":"Fisher7438","numberFloat":18.545284859315583,"numberInt":149,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 18:05:10","country":"Gabon","email":"[email protected]","fixString":"1651508951","flag":"232","game":"princeintroduce317","name":"Prosacco3916","numberFloat":-17.16755868855368,"numberInt":182,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 19:50:09","country":"Bhutan","email":"[email protected]","fixString":"1968995577","flag":"122","game":"springchallenge194","name":"Jewess8312","numberFloat":-18.820689323640988,"numberInt":89,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-28 08:40:16","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"1938366436","flag":"aad","game":"princeintroduce317","name":"Trantow7717","numberFloat":-0.46900768924772507,"numberInt":187,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 19:50:09","country":"Brazil","email":"[email protected]","fixString":"1178230264","flag":"232","game":"showarrange149","name":"Hermiston9891","numberFloat":-2.232865386643045,"numberInt":72,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-13 10:26:17","country":"Bhutan","email":"[email protected]","fixString":"6450049067","flag":"1100","game":"seriesdefine250","name":"Gorczany3870","numberFloat":17.992466675524273,"numberInt":182,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 12:22:39","country":"Togo","email":"[email protected]","fixString":"7132195822","flag":"1100","game":"spottalk16","name":"Predovic2309","numberFloat":16.30952088363294,"numberInt":154,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-19 00:13:43","country":"Tajikistan","email":"[email protected]","fixString":"9488543231","flag":"232","game":"diseasewould123","name":"Kshlerin3181","numberFloat":3.734164910042889,"numberInt":57,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"Mexico","email":"[email protected]","fixString":"0524659748","flag":"1100","game":"princeintroduce317","name":"Skiles6473","numberFloat":12.107937376770455,"numberInt":104,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-08 22:53:07","country":"Togo","email":"[email protected]","fixString":"5364849984","flag":"aad","game":"diseasewould123","name":"Orn8933","numberFloat":6.208851877233062,"numberInt":112,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-08 22:53:07","country":"French Southern Territories","email":"[email protected]","fixString":"1786788738","flag":"1100","game":"showarrange149","name":"Padberg7143","numberFloat":14.65854152676047,"numberInt":111,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-22 06:25:44","country":"Mexico","email":"[email protected]","fixString":"4056409413","flag":"122","game":"congressrealize177","name":"Walter7984","numberFloat":-8.990344344177878,"numberInt":118,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-30 15:39:07","country":"Gabon","email":"[email protected]","fixString":"1036333759","flag":"232","game":"congressrealize177","name":"Padberg7143","numberFloat":-1.024411611099616,"numberInt":78,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 08:29:27","country":"Tajikistan","email":"[email protected]","fixString":"2078026197","flag":"232","game":"congressrealize177","name":"Kling6873","numberFloat":-5.6343095679482325,"numberInt":130,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-10 14:09:36","country":"Tajikistan","email":"[email protected]","fixString":"7165213298","flag":"1100","game":"partseem648","name":"Kshlerin6544","numberFloat":-14.532088676085383,"numberInt":106,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 22:04:31","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"4176425454","flag":"aad","game":"seriesdefine250","name":"Hickle7521","numberFloat":11.730867263625719,"numberInt":158,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 02:24:29","country":"Mexico","email":"[email protected]","fixString":"6946539924","flag":"232","game":"princeintroduce317","name":"Steuber6904","numberFloat":12.05102568484033,"numberInt":40,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-28 08:40:16","country":"Bhutan","email":"[email protected]","fixString":"6410495890","flag":"1100","game":"diseasewould123","name":"Schultz9206","numberFloat":-9.179892855821006,"numberInt":101,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 23:02:11","country":"Brazil","email":"[email protected]","fixString":"5526089847","flag":"aad","game":"spottalk16","name":"Wolff9630","numberFloat":14.172890442748436,"numberInt":139,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-29 17:49:32","country":"British Virgin Islands","email":"[email protected]","fixString":"4972675285","flag":"232","game":"springchallenge194","name":"Tremblay1989","numberFloat":19.241707964497177,"numberInt":59,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 17:14:57","country":"Gabon","email":"[email protected]","fixString":"7984375782","flag":"122","game":"showarrange149","name":"Rice9839","numberFloat":-17.996575509773088,"numberInt":194,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-01 19:50:09","country":"Mexico","email":"[email protected]","fixString":"8274270529","flag":"122","game":"springchallenge194","name":"Okuneva3658","numberFloat":-3.3429462516429496,"numberInt":100,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-12 06:54:52","country":"Togo","email":"[email protected]","fixString":"6976539304","flag":"1100","game":"incomethink708","name":"Trantow7717","numberFloat":14.41960490460674,"numberInt":17,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 07:02:33","country":"Brazil","email":"[email protected]","fixString":"7688947060","flag":"232","game":"springchallenge194","name":"McDermott3313","numberFloat":-17.64102249620886,"numberInt":105,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-17 08:34:48","country":"Gabon","email":"[email protected]","fixString":"0434930072","flag":"122","game":"partseem648","name":"Watsica2190","numberFloat":7.703220126522101,"numberInt":2,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-16 12:10:16","country":"Togo","email":"[email protected]","fixString":"7836545415","flag":"122","game":"springchallenge194","name":"Herman3103","numberFloat":-11.962236439771688,"numberInt":137,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-23 05:12:16","country":"Bhutan","email":"[email protected]","fixString":"4202557634","flag":"232","game":"springchallenge194","name":"Kshlerin6544","numberFloat":-2.064167480800325,"numberInt":98,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-08 22:53:07","country":"Togo","email":"[email protected]","fixString":"5477315497","flag":"122","game":"seriesdefine250","name":"Jewess8312","numberFloat":-9.659710362832746,"numberInt":115,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 00:11:32","country":"Bhutan","email":"[email protected]","fixString":"7951140716","flag":"aad","game":"princeintroduce317","name":"Gislason1692","numberFloat":-8.305491407622176,"numberInt":92,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 08:53:56","country":"Togo","email":"[email protected]","fixString":"7154782294","flag":"aad","game":"diseasewould123","name":"Gislason3246","numberFloat":6.011128605465551,"numberInt":144,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-21 12:47:28","country":"Tajikistan","email":"[email protected]","fixString":"3364889441","flag":"232","game":"seriesdefine250","name":"Wunsch8247","numberFloat":5.985553444840473,"numberInt":133,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-18 02:24:29","country":"Brazil","email":"[email protected]","fixString":"8008278621","flag":"122","game":"spottalk16","name":"Gislason1692","numberFloat":14.532247456789346,"numberInt":44,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 00:23:12","country":"Gabon","email":"[email protected]","fixString":"8753137042","flag":"aad","game":"princeintroduce317","name":"Trantow7717","numberFloat":-17.600164831692997,"numberInt":136,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 18:05:10","country":"Bhutan","email":"[email protected]","fixString":"5226627406","flag":"aad","game":"showarrange149","name":"Dooley4984","numberFloat":-6.079978262528515,"numberInt":85,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-16 05:49:08","country":"Tajikistan","email":"[email protected]","fixString":"7133104162","flag":"232","game":"seriesdefine250","name":"Watsica2190","numberFloat":11.9755310945019,"numberInt":165,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 22:04:31","country":"British Virgin Islands","email":"[email protected]","fixString":"9968058453","flag":"122","game":"spottalk16","name":"Schulist7113","numberFloat":-13.304696398696109,"numberInt":168,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-15 10:10:24","country":"British Virgin Islands","email":"[email protected]","fixString":"3128139020","flag":"232","game":"showarrange149","name":"Smitham3531","numberFloat":18.67464742370304,"numberInt":81,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-30 14:12:25","country":"Togo","email":"[email protected]","fixString":"4726959156","flag":"232","game":"diseasewould123","name":"Wunsch5124","numberFloat":19.49488527241272,"numberInt":80,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 00:11:32","country":"Norway","email":"[email protected]","fixString":"6281005144","flag":"aad","game":"techniquerecognize820","name":"Tremblay1989","numberFloat":-6.690961105488773,"numberInt":189,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-09 01:42:00","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"7051919275","flag":"1100","game":"princeintroduce317","name":"VonRueden4861","numberFloat":5.353149695186566,"numberInt":35,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 12:22:39","country":"British Virgin Islands","email":"[email protected]","fixString":"6772819176","flag":"232","game":"spottalk16","name":"Herman3103","numberFloat":8.686530533145316,"numberInt":16,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-04 08:29:27","country":"Norway","email":"[email protected]","fixString":"5119221755","flag":"122","game":"diseasewould123","name":"Considine2380","numberFloat":17.65882105805225,"numberInt":117,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-09-10 14:09:36","country":"Cocos (Keeling) Islands","email":"[email protected]","fixString":"5751402992","flag":"122","game":"diseasewould123","name":"Macejkovic4635","numberFloat":-18.85954544889489,"numberInt":76,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-21 12:47:28","country":"Tajikistan","email":"[email protected]","fixString":"5022295051","flag":"232","game":"partseem648","name":"Crona8570","numberFloat":18.296382853500038,"numberInt":193,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-12 23:02:11","country":"Tajikistan","email":"[email protected]","fixString":"6774718697","flag":"1100","game":"springchallenge194","name":"Gislason3246","numberFloat":-5.0988051139477,"numberInt":97,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-03 01:54:55","country":"Gabon","email":"[email protected]","fixString":"2647238918","flag":"232","game":"princeintroduce317","name":"Veum6259","numberFloat":-2.5708437521552945,"numberInt":190,"startTime":"2021-07-07 15:42:16"}
{"ckTime":"2021-10-10 22:04:31","country":"British Virgin Islands","email":"[email protected]","fixString":"4336318518","flag":"aad","game":"incomethink708","name":"Mayert5107","numberFloat":9.593197495421126,"numberInt":22,"startTime":"2021-07-07 15:42:16"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9637,"databaseName":"DM7","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"160.129.93.197","destMacAddress":"5d:35:3f:e3:fd:f9","destPort":8621,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"56645114019440894499175217581252","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"953554175072670624","sqlLen":32,"srcAddress":"147.244.65.123","srcGeoCity":"上海","srcMacAddress":"c7:3b:e3:e9:f9:c6","srcPort":3721,"srcUserName":"Hauck5699","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5650,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"242.155.33.250","destMacAddress":"18:4e:cd:f0:ab:d3","destPort":2133,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"30666208003375829147557694632085","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"496733380991280052","sqlLen":109,"srcAddress":"73.113.63.72","srcGeoCity":"杭州","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":7188,"srcUserName":"Ryan5711","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6607,"databaseName":"ES","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"3b:f4:05:43:17:ae","destPort":1293,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"99485794919639545711883409059686","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"242748560862214621","sqlLen":77,"srcAddress":"79.63.99.227","srcGeoCity":"深圳","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":5747,"srcUserName":"Hansen4427","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7619,"databaseName":"ES","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"135.7.168.2","destMacAddress":"ef:be:94:c0:e0:bb","destPort":9661,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"80254544967696702344727567350578","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"707683074779547374","sqlLen":45,"srcAddress":"66.243.193.50","srcGeoCity":"深圳","srcMacAddress":"92:d1:ee:18:c0:a5","srcPort":4567,"srcUserName":"Purdy9903","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2134,"databaseName":"DM7","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"52.244.219.229","destMacAddress":"99:48:f8:7c:c9:4b","destPort":1634,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"36923764780055608578436286125936","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"542377133610617227","sqlLen":41,"srcAddress":"214.240.181.133","srcGeoCity":"杭州","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":8718,"srcUserName":"Blick6768","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7023,"databaseName":"MySQL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"172.186.253.51","destMacAddress":"c4:b4:18:34:ad:0e","destPort":8417,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"97402378320099041717792759588598","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"356170893001105418","sqlLen":58,"srcAddress":"123.247.6.39","srcGeoCity":"金华","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":1913,"srcUserName":"Brekke2830","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7453,"databaseName":"DB2","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"58:55:8d:ba:07:0b","destPort":1298,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"68820230682369234316284364683886","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"912169798106540838","sqlLen":198,"srcAddress":"123.247.6.39","srcGeoCity":"华盛顿","srcMacAddress":"20:42:79:d2:33:68","srcPort":1171,"srcUserName":"Deckow6496","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9545,"databaseName":"DM7","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"52.244.219.229","destMacAddress":"99:48:f8:7c:c9:4b","destPort":8794,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"55658919283533162414662380619782","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"155659439436547630","sqlLen":99,"srcAddress":"199.24.149.55","srcGeoCity":"北京","srcMacAddress":"37:72:dd:81:99:ed","srcPort":9624,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":944,"databaseName":"Clickhouse","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"5d:35:3f:e3:fd:f9","destPort":3658,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"89350204862174298414948418425332","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"997289252320767813","sqlLen":70,"srcAddress":"9.152.245.69","srcGeoCity":"金华","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":2974,"srcUserName":"Smitham9467","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6264,"databaseName":"gp","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"83:e3:e3:77:33:bc","destPort":8589,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"93908221157980909329785536637017","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"378987547287868771","sqlLen":162,"srcAddress":"123.149.19.219","srcGeoCity":"LA","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":426,"srcUserName":"Greenfelder4260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4177,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":4149,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"68586527092737977028976465170018","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"375898615995061374","sqlLen":116,"srcAddress":"13.154.191.2","srcGeoCity":"上海","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":6969,"srcUserName":"Hodkiewicz7407","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2605,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"e9:fa:a1:57:c9:83","destPort":277,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"26264152862610233623183772321072","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"306482755552122924","sqlLen":148,"srcAddress":"56.81.252.53","srcGeoCity":"杭州","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":3586,"srcUserName":"Hauck5699","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5522,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"7c:5a:6a:90:d6:26","destPort":2036,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"62222536360920985846523265522480","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"778874774369063739","sqlLen":2,"srcAddress":"149.31.238.164","srcGeoCity":"上海","srcMacAddress":"79:ce:b2:7f:85:a2","srcPort":4691,"srcUserName":"Adams9955","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5188,"databaseName":"gp","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"ca:5b:79:0f:ed:bb","destPort":1456,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"77885585765709199329490821347860","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"657608341093617510","sqlLen":156,"srcAddress":"9.204.53.243","srcGeoCity":"上海","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":8043,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7502,"databaseName":"DB2","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"172.230.44.153","destMacAddress":"e9:fa:a1:57:c9:83","destPort":2681,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"06129484757573821091474538433691","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"775161107753699570","sqlLen":112,"srcAddress":"157.139.222.16","srcGeoCity":"上海","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":468,"srcUserName":"Cartwright5260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4916,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"3b:a8:0e:11:b9:9c","destPort":2240,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"01126826002139041735704224813213","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"289733141728841842","sqlLen":52,"srcAddress":"10.131.28.89","srcGeoCity":"深圳","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":1817,"srcUserName":"Kiehn1022","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3581,"databaseName":"MySQL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"215.1.149.24","destMacAddress":"58:55:8d:ba:07:0b","destPort":4668,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"77529332131120683491807627857938","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"875691062489681262","sqlLen":88,"srcAddress":"149.31.238.164","srcGeoCity":"LA","srcMacAddress":"92:d1:ee:18:c0:a5","srcPort":9144,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6310,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"ef:be:94:c0:e0:bb","destPort":8545,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"29994811409323899567336226281259","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"438256613053437714","sqlLen":178,"srcAddress":"245.0.251.226","srcGeoCity":"宁波","srcMacAddress":"e1:97:dc:6b:1a:14","srcPort":2379,"srcUserName":"Schiller7712","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8453,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"58:55:8d:ba:07:0b","destPort":5782,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"72830566273436639330076446200770","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"706938345472061483","sqlLen":185,"srcAddress":"6.207.29.121","srcGeoCity":"北京","srcMacAddress":"3b:8d:51:1d:b1:14","srcPort":3143,"srcUserName":"Ratke7760","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8521,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"42:ef:cc:37:90:fd","destPort":6523,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"59758234766719486686381888018976","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"261191624164273132","sqlLen":163,"srcAddress":"255.65.169.110","srcGeoCity":"LA","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":8805,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9755,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"180.78.203.172","destMacAddress":"f8:52:23:e9:ab:72","destPort":4116,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"10637722845736488527084396377797","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"440248643431609813","sqlLen":57,"srcAddress":"11.51.151.141","srcGeoCity":"北京","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":8997,"srcUserName":"Leffler9138","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7248,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"42:ef:cc:37:90:fd","destPort":2992,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"30415262065677484779032444683700","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"273599807097898627","sqlLen":191,"srcAddress":"156.192.154.196","srcGeoCity":"北京","srcMacAddress":"b3:bf:ec:dc:28:23","srcPort":7575,"srcUserName":"Schamberger1508","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6480,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"92:03:d6:cf:be:50","destPort":1121,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"83123500198769745750321971834071","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"065527140448137509","sqlLen":199,"srcAddress":"199.24.149.55","srcGeoCity":"LA","srcMacAddress":"fa:13:b1:95:72:b8","srcPort":8270,"srcUserName":"Hickle1847","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3044,"databaseName":"ES","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"2a:a9:74:cd:e7:4d","destPort":203,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"73373703376526193077189603722992","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"799870656535688248","sqlLen":191,"srcAddress":"157.139.222.16","srcGeoCity":"杭州","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":3944,"srcUserName":"McKenzie9784","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4212,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"154.23.161.161","destMacAddress":"a0:c2:0f:ea:ee:d6","destPort":4795,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"90160544703527788736875845421079","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"960979578153434766","sqlLen":200,"srcAddress":"28.203.245.176","srcGeoCity":"华盛顿","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":2379,"srcUserName":"Hyatt9769","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5539,"databaseName":"gp","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"57.101.9.104","destMacAddress":"2a:a9:74:cd:e7:4d","destPort":673,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"65432365795366569822909060547682","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"951857650268986989","sqlLen":100,"srcAddress":"123.149.19.219","srcGeoCity":"杭州","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":4103,"srcUserName":"Harris2503","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5831,"databaseName":"mssql","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"34.10.134.124","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":6910,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"38798402200367568390209003482105","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"562965314772228813","sqlLen":168,"srcAddress":"56.81.252.53","srcGeoCity":"LA","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":7223,"srcUserName":"Lind6952","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6867,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"215.1.149.24","destMacAddress":"ca:5b:79:0f:ed:bb","destPort":5062,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"71627434992508622220636867523623","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"992228389607455105","sqlLen":53,"srcAddress":"245.0.251.226","srcGeoCity":"华盛顿","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":2118,"srcUserName":"Nienow3228","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4363,"databaseName":"Clickhouse","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"e8:1a:46:62:17:80","destPort":6036,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"90168141194588309162821969675954","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"017539312421669296","sqlLen":198,"srcAddress":"157.139.222.16","srcGeoCity":"杭州","srcMacAddress":"e5:72:a2:9d:aa:e0","srcPort":7974,"srcUserName":"DuBuque5652","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9691,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"e8:1a:46:62:17:80","destPort":4220,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"16604997243696787444492407978963","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"637381114487810589","sqlLen":7,"srcAddress":"13.154.191.2","srcGeoCity":"宁波","srcMacAddress":"1c:ec:dd:61:b8:c5","srcPort":255,"srcUserName":"Abernathy9773","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4154,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"aa:86:86:ca:3c:9a","destPort":7267,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"24651460848040527788146316741913","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"602148799440370001","sqlLen":106,"srcAddress":"47.11.16.170","srcGeoCity":"宁波","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":2044,"srcUserName":"Heller4160","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6087,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":1058,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"26934132761836162276798608178410","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"384121205294265653","sqlLen":79,"srcAddress":"118.182.13.249","srcGeoCity":"深圳","srcMacAddress":"3c:61:2e:89:91:f4","srcPort":6376,"srcUserName":"Torphy3870","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3262,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.225.192.29","destMacAddress":"0c:dc:e8:ef:9c:bd","destPort":6663,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"23055229967182148269310318267041","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"039431210830688988","sqlLen":66,"srcAddress":"228.159.255.221","srcGeoCity":"深圳","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":5895,"srcUserName":"Hirthe3270","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9636,"databaseName":"DM7","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"80.228.177.108","destMacAddress":"36:92:b6:b5:44:40","destPort":7097,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"67948664172233811955712951565135","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"676380356505058243","sqlLen":18,"srcAddress":"73.113.63.72","srcGeoCity":"宁波","srcMacAddress":"20:42:79:d2:33:68","srcPort":2124,"srcUserName":"Corwin8681","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4293,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"160.129.93.197","destMacAddress":"07:5d:0d:08:c8:87","destPort":193,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"16224777688673182327685676857283","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"664296976217113856","sqlLen":38,"srcAddress":"22.84.131.31","srcGeoCity":"北京","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":883,"srcUserName":"Schiller6239","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9506,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"73.200.164.5","destMacAddress":"70:16:7a:f4:c1:68","destPort":4460,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"45727107179888612054252023431209","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"517891608042165860","sqlLen":106,"srcAddress":"67.213.112.79","srcGeoCity":"深圳","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":9325,"srcUserName":"Adams9955","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7840,"databaseName":"Oracle","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"49.28.210.244","destMacAddress":"32:97:e6:e4:41:2f","destPort":137,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"86396517242791080833620799239707","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"383500432910961159","sqlLen":160,"srcAddress":"241.66.188.167","srcGeoCity":"华盛顿","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":9308,"srcUserName":"Kuphal4706","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7038,"databaseName":"pg","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"48:ed:b1:09:1e:0e","destPort":5905,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"95806702549293061512962619500520","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"333687486409806561","sqlLen":81,"srcAddress":"13.154.191.2","srcGeoCity":"LA","srcMacAddress":"e5:72:a2:9d:aa:e0","srcPort":3780,"srcUserName":"Botsford6581","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8909,"databaseName":"DM7","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"242.155.33.250","destMacAddress":"f8:52:23:e9:ab:72","destPort":1448,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"99417714894362273691901807280019","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"055651452791011727","sqlLen":58,"srcAddress":"3.245.156.70","srcGeoCity":"宁波","srcMacAddress":"39:cf:4d:1b:fa:b5","srcPort":3520,"srcUserName":"Zemlak9919","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9868,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"49.28.210.244","destMacAddress":"92:03:d6:cf:be:50","destPort":3915,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"76366287575408938097156661129269","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"019826409202277835","sqlLen":140,"srcAddress":"67.213.112.79","srcGeoCity":"宁波","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":2372,"srcUserName":"Ratke7760","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1869,"databaseName":"DM7","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"40.44.91.222","destMacAddress":"0d:33:f2:ba:82:59","destPort":8964,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"90635225104307108028851893111895","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"010651889217332949","sqlLen":83,"srcAddress":"16.125.222.145","srcGeoCity":"北京","srcMacAddress":"e5:72:a2:9d:aa:e0","srcPort":8292,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1587,"databaseName":"DB2","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"80.228.177.108","destMacAddress":"f1:4d:43:d2:52:7a","destPort":9151,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"67047804017509396466668338348387","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"479382876181493790","sqlLen":100,"srcAddress":"251.208.78.91","srcGeoCity":"LA","srcMacAddress":"1c:ec:dd:61:b8:c5","srcPort":4293,"srcUserName":"Huel6548","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4694,"databaseName":"ES","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"154.23.161.161","destMacAddress":"8a:fd:43:96:a7:b9","destPort":9298,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"25594884610755579703039051687723","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"513696396004254865","sqlLen":54,"srcAddress":"173.41.94.143","srcGeoCity":"华盛顿","srcMacAddress":"01:27:b1:26:06:9d","srcPort":491,"srcUserName":"Hickle1847","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9749,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"66.119.162.251","destMacAddress":"59:4b:5a:cf:ad:c2","destPort":1385,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"98646647258012369290431063502891","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"550273117468128837","sqlLen":5,"srcAddress":"79.63.99.227","srcGeoCity":"LA","srcMacAddress":"fc:61:69:20:ae:a7","srcPort":2793,"srcUserName":"Runolfsson2883","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8722,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"248.225.192.29","destMacAddress":"83:e3:e3:77:33:bc","destPort":7518,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"19820358359757058742982142473430","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"776513258192680637","sqlLen":63,"srcAddress":"22.84.131.31","srcGeoCity":"上海","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":4806,"srcUserName":"Cremin2487","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3882,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"3d:09:21:bc:f4:9d","destPort":1075,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"50691594729181609212282275292474","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"505736147542062512","sqlLen":49,"srcAddress":"118.182.13.249","srcGeoCity":"北京","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":6833,"srcUserName":"Osinski6144","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9741,"databaseName":"mongoDB","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"e5:20:49:85:c9:b7","destPort":3084,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"93979343470594518629096652661820","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"651920758761794926","sqlLen":124,"srcAddress":"22.84.131.31","srcGeoCity":"金华","srcMacAddress":"37:72:dd:81:99:ed","srcPort":7005,"srcUserName":"Dach8927","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9704,"databaseName":"mongoDB","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"22:29:10:75:71:91","destPort":2618,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"01337119514410296260780678307465","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"120671777624679977","sqlLen":66,"srcAddress":"36.29.42.142","srcGeoCity":"上海","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":9552,"srcUserName":"Runolfsson2883","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1922,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"129.5.33.59","destMacAddress":"70:16:7a:f4:c1:68","destPort":1098,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"63260375389611875868342776748765","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"042915071561291441","sqlLen":58,"srcAddress":"28.111.16.147","srcGeoCity":"宁波","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":8568,"srcUserName":"Cartwright5260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6481,"databaseName":"MySQL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"75.114.217.89","destMacAddress":"32:97:e6:e4:41:2f","destPort":8810,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"42007235625022075674614042508465","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"109321091784456533","sqlLen":57,"srcAddress":"205.27.205.163","srcGeoCity":"金华","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":7457,"srcUserName":"Graham8516","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1547,"databaseName":"MySQL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"6.255.150.201","destMacAddress":"3d:a0:6d:c1:43:e5","destPort":6192,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"22155147165933047426651217353154","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"384312143497576319","sqlLen":110,"srcAddress":"255.65.169.110","srcGeoCity":"杭州","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":8300,"srcUserName":"Greenholt5023","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1204,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"57.101.9.104","destMacAddress":"b5:ae:92:d8:63:f4","destPort":6764,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"79140440740219220526178008953222","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"582716308000267393","sqlLen":81,"srcAddress":"123.149.19.219","srcGeoCity":"宁波","srcMacAddress":"d5:72:24:37:45:e6","srcPort":5175,"srcUserName":"Kovacek5641","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5584,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"172.186.253.51","destMacAddress":"ca:5b:79:0f:ed:bb","destPort":8845,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"67044750032192236702957639339049","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"220053702168960557","sqlLen":72,"srcAddress":"11.51.151.141","srcGeoCity":"宁波","srcMacAddress":"9c:c7:61:a4:95:60","srcPort":4134,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7737,"databaseName":"Clickhouse","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"123.125.246.182","destMacAddress":"07:5d:0d:08:c8:87","destPort":2667,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"88566845447566700510697394957689","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"017951831028195383","sqlLen":172,"srcAddress":"251.208.78.91","srcGeoCity":"杭州","srcMacAddress":"37:72:dd:81:99:ed","srcPort":2896,"srcUserName":"Purdy9903","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6803,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"58:55:8d:ba:07:0b","destPort":5315,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"83507862004388315973544657910908","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"931573453470761692","sqlLen":72,"srcAddress":"214.240.181.133","srcGeoCity":"LA","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":1625,"srcUserName":"Upton9354","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3494,"databaseName":"Clickhouse","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"34.10.134.124","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":602,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"36874230366583960638610077823349","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"642108173895856716","sqlLen":79,"srcAddress":"157.139.222.16","srcGeoCity":"华盛顿","srcMacAddress":"89:67:0e:ee:f6:25","srcPort":7036,"srcUserName":"Purdy9903","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2815,"databaseName":"DM7","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"99.19.85.58","destMacAddress":"18:4e:cd:f0:ab:d3","destPort":4229,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"39997237495396563514596084112860","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"505606133868709549","sqlLen":120,"srcAddress":"6.207.29.121","srcGeoCity":"深圳","srcMacAddress":"73:33:41:15:54:05","srcPort":4507,"srcUserName":"Kuhic1636","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8607,"databaseName":"mssql","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"26.101.116.201","destMacAddress":"3d:09:21:bc:f4:9d","destPort":4215,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"56555294972375004303687999190103","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"689649340846130322","sqlLen":55,"srcAddress":"66.243.193.50","srcGeoCity":"北京","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":3915,"srcUserName":"Cronin6638","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2956,"databaseName":"orcl","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"237.136.204.82","destMacAddress":"22:29:10:75:71:91","destPort":4009,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"86610836549638828489712504971068","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"334026467055902855","sqlLen":139,"srcAddress":"10.131.28.89","srcGeoCity":"杭州","srcMacAddress":"ad:2d:9a:ac:39:93","srcPort":9418,"srcUserName":"Schiller6239","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":698,"databaseName":"ES","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"34.10.134.124","destMacAddress":"32:97:e6:e4:41:2f","destPort":3343,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"28923580085323837770277068721855","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"730711318295898589","sqlLen":11,"srcAddress":"123.247.6.39","srcGeoCity":"宁波","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":2169,"srcUserName":"Ryan5711","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":92,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"42.108.145.68","destMacAddress":"5d:35:3f:e3:fd:f9","destPort":3239,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"26321807152802608516859049857769","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"701228405712524320","sqlLen":159,"srcAddress":"3.245.156.70","srcGeoCity":"杭州","srcMacAddress":"dc:7f:e9:d5:33:c4","srcPort":5983,"srcUserName":"Schamberger1508","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7022,"databaseName":"ES","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"a0:c2:0f:ea:ee:d6","destPort":7216,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"40798015829997633249032683714042","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"888087678448556621","sqlLen":69,"srcAddress":"96.167.123.16","srcGeoCity":"上海","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":2219,"srcUserName":"Corwin8681","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7028,"databaseName":"Clickhouse","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"11.156.64.137","destMacAddress":"58:55:8d:ba:07:0b","destPort":7239,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"19953195469941039800395985213147","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"423848122782865168","sqlLen":118,"srcAddress":"73.113.63.72","srcGeoCity":"金华","srcMacAddress":"73:33:41:15:54:05","srcPort":7943,"srcUserName":"Schiller7712","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":29,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":1399,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"19200520128037820998632989773954","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"823424854707249154","sqlLen":111,"srcAddress":"128.80.31.147","srcGeoCity":"华盛顿","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":5489,"srcUserName":"Cronin6638","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1799,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"3b:f4:05:43:17:ae","destPort":5016,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"44321623428189324666030434398876","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"913780059923663980","sqlLen":73,"srcAddress":"118.182.13.249","srcGeoCity":"LA","srcMacAddress":"3b:8d:51:1d:b1:14","srcPort":1058,"srcUserName":"Jenkins3888","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9305,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"7d:ac:a2:8f:f9:9c","destPort":1445,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"05720946804758426673575792463788","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"954935787102360313","sqlLen":4,"srcAddress":"28.203.245.176","srcGeoCity":"金华","srcMacAddress":"4b:21:cd:2b:5f:2a","srcPort":7923,"srcUserName":"Baumbach5020","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9360,"databaseName":"pg","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"e2:4e:59:c0:84:e7","destPort":3506,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"42661098068769020524238391659781","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"482959472408363616","sqlLen":27,"srcAddress":"9.204.53.243","srcGeoCity":"LA","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":5831,"srcUserName":"Heaney4671","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":358,"databaseName":"orcl","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"172.230.44.153","destMacAddress":"e2:4e:59:c0:84:e7","destPort":9644,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"62951174987551342150626485135084","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"218392257449581800","sqlLen":144,"srcAddress":"128.80.31.147","srcGeoCity":"杭州","srcMacAddress":"ad:2d:9a:ac:39:93","srcPort":1281,"srcUserName":"Grimes5908","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2804,"databaseName":"Oracle","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"8e:88:13:03:63:3e","destPort":4082,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"42215486376748706738333452529157","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"803229477172671902","sqlLen":98,"srcAddress":"9.204.53.243","srcGeoCity":"上海","srcMacAddress":"09:2d:de:3e:5b:ed","srcPort":5323,"srcUserName":"Schmitt8877","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4241,"databaseName":"gp","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"73.200.164.5","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":9494,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"57247009118777705484825080666322","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"971512910247997036","sqlLen":188,"srcAddress":"173.41.94.143","srcGeoCity":"LA","srcMacAddress":"e1:97:dc:6b:1a:14","srcPort":4029,"srcUserName":"Gislason1121","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2431,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"180.78.203.172","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":3167,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"15442071275436175091538467666175","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"369809097552811259","sqlLen":87,"srcAddress":"13.154.191.2","srcGeoCity":"北京","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":6334,"srcUserName":"Hauck5699","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5243,"databaseName":"ES","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"57.101.9.104","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":2332,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"70361914458995526781918694718799","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"348797807773548164","sqlLen":158,"srcAddress":"168.182.180.60","srcGeoCity":"金华","srcMacAddress":"cf:ef:62:85:c1:ef","srcPort":2253,"srcUserName":"Shields6383","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6639,"databaseName":"gp","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"200.166.168.76","destMacAddress":"e1:4e:4f:2a:e4:c7","destPort":9397,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"00864998418138441072324618912196","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"625766391039755735","sqlLen":135,"srcAddress":"188.22.232.152","srcGeoCity":"深圳","srcMacAddress":"1c:ec:dd:61:b8:c5","srcPort":6454,"srcUserName":"Brekke2830","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1506,"databaseName":"orcl","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"b5:ae:92:d8:63:f4","destPort":8909,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"50609038480811037785168578207734","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"054680946726711159","sqlLen":41,"srcAddress":"9.204.53.243","srcGeoCity":"华盛顿","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":7017,"srcUserName":"DuBuque5652","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5818,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.37.58.114","destMacAddress":"42:ef:cc:37:90:fd","destPort":9804,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"14249982215230763983918970734995","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"748615621563613098","sqlLen":24,"srcAddress":"251.208.78.91","srcGeoCity":"上海","srcMacAddress":"45:6e:34:3c:a9:7c","srcPort":8346,"srcUserName":"Larson8473","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7549,"databaseName":"gp","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"71.221.108.180","destMacAddress":"a0:c2:0f:ea:ee:d6","destPort":5427,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"70979834019275844674175556558868","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"070510806336467450","sqlLen":149,"srcAddress":"6.207.29.121","srcGeoCity":"深圳","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":7213,"srcUserName":"DuBuque5652","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":374,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"18.19.76.32","destMacAddress":"02:da:86:03:80:d7","destPort":446,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"25787116881919402774747778191262","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"192588008473274722","sqlLen":198,"srcAddress":"157.139.222.16","srcGeoCity":"LA","srcMacAddress":"b1:32:5d:66:d6:cd","srcPort":2013,"srcUserName":"DuBuque5652","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3832,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"237.136.204.82","destMacAddress":"ef:be:94:c0:e0:bb","destPort":831,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"91681115335848544301612533826563","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"634607321381978304","sqlLen":148,"srcAddress":"172.79.234.73","srcGeoCity":"LA","srcMacAddress":"37:72:dd:81:99:ed","srcPort":2862,"srcUserName":"Steuber6439","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7215,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.73.84.60","destMacAddress":"4a:94:c0:2c:f0:63","destPort":9644,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"38763769819248770084987790643056","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"427707917662635422","sqlLen":173,"srcAddress":"251.208.78.91","srcGeoCity":"深圳","srcMacAddress":"cf:ef:62:85:c1:ef","srcPort":5250,"srcUserName":"Schumm7730","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2394,"databaseName":"DM7","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"0d:33:f2:ba:82:59","destPort":6945,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"57885496654204222622779882361215","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"626720369601507203","sqlLen":24,"srcAddress":"36.29.42.142","srcGeoCity":"杭州","srcMacAddress":"bd:76:95:76:dc:75","srcPort":3081,"srcUserName":"Grimes5908","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5078,"databaseName":"ORCL","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"c4:b4:18:34:ad:0e","destPort":2445,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"43999970479728887782118237688641","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"320522004544156624","sqlLen":70,"srcAddress":"13.154.191.2","srcGeoCity":"上海","srcMacAddress":"e5:78:71:2a:dc:c8","srcPort":70,"srcUserName":"Leffler9138","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1441,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"42.108.145.68","destMacAddress":"8a:fd:43:96:a7:b9","destPort":8397,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"05192208189238764284999427333717","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"909856666612119101","sqlLen":160,"srcAddress":"156.192.154.196","srcGeoCity":"上海","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":8896,"srcUserName":"Lind2897","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":619,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"129.5.33.59","destMacAddress":"94:d8:e5:2f:c8:57","destPort":8610,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"33135714336728978269465419569869","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"308338995652344725","sqlLen":46,"srcAddress":"218.236.193.2","srcGeoCity":"LA","srcMacAddress":"dc:7f:e9:d5:33:c4","srcPort":7440,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6923,"databaseName":"mssql","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"6.255.150.201","destMacAddress":"0e:4b:74:c9:0c:8b","destPort":4988,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"73934543294899568933037336080570","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"120876111656273259","sqlLen":77,"srcAddress":"245.0.251.226","srcGeoCity":"上海","srcMacAddress":"1c:ec:dd:61:b8:c5","srcPort":3717,"srcUserName":"Harris2503","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8154,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"248.225.192.29","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":6427,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"61184469639013295239617916752882","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"422083132309741750","sqlLen":88,"srcAddress":"118.182.13.249","srcGeoCity":"LA","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":2230,"srcUserName":"Ryan5711","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3287,"databaseName":"mongoDB","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"a0:c2:0f:ea:ee:d6","destPort":9049,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"45420103501231322895791824573324","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"026406705907476201","sqlLen":87,"srcAddress":"9.204.53.243","srcGeoCity":"LA","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":8649,"srcUserName":"Huel6548","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1780,"databaseName":"ORCL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"200.166.168.76","destMacAddress":"22:29:10:75:71:91","destPort":6257,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"35696751763796241438268111880683","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"936922002320600172","sqlLen":40,"srcAddress":"47.11.16.170","srcGeoCity":"上海","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":630,"srcUserName":"Berge3858","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3243,"databaseName":"gp","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"49.28.210.244","destMacAddress":"f8:52:23:e9:ab:72","destPort":5465,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"07393472191146180467845127378286","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"562173760489583561","sqlLen":79,"srcAddress":"3.245.156.70","srcGeoCity":"华盛顿","srcMacAddress":"79:ce:b2:7f:85:a2","srcPort":6420,"srcUserName":"Haag1906","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8190,"databaseName":"gp","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"213.34.2.241","destMacAddress":"c4:b4:18:34:ad:0e","destPort":7484,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"25494458611025321149969768426665","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"377812971922749833","sqlLen":171,"srcAddress":"10.131.28.89","srcGeoCity":"上海","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":4635,"srcUserName":"Cronin6638","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7288,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"40.44.91.222","destMacAddress":"3d:09:21:bc:f4:9d","destPort":3539,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"99680455194871371342598397916087","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"115840090680084600","sqlLen":134,"srcAddress":"251.208.78.91","srcGeoCity":"上海","srcMacAddress":"73:33:41:15:54:05","srcPort":7817,"srcUserName":"Zemlak9919","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8858,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"18.19.76.32","destMacAddress":"e9:fa:a1:57:c9:83","destPort":6579,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"59886564618048365656473765950214","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"013389336370647058","sqlLen":52,"srcAddress":"47.11.16.170","srcGeoCity":"上海","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":3113,"srcUserName":"Huel6548","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7998,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"242.155.33.250","destMacAddress":"36:92:b6:b5:44:40","destPort":9729,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"54993143201867152469949624921937","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"447786467391791497","sqlLen":199,"srcAddress":"218.236.193.2","srcGeoCity":"上海","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":9273,"srcUserName":"Kessler4694","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9776,"databaseName":"MySQL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"3b:a8:0e:11:b9:9c","destPort":5582,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"15766333694682086519468382304112","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"307863554925635156","sqlLen":161,"srcAddress":"118.182.13.249","srcGeoCity":"北京","srcMacAddress":"79:ce:b2:7f:85:a2","srcPort":8233,"srcUserName":"Greenholt5023","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1731,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"42.108.145.68","destMacAddress":"18:4e:cd:f0:ab:d3","destPort":552,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"27473646417389337512700033532553","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"283039142441497937","sqlLen":86,"srcAddress":"28.203.245.176","srcGeoCity":"上海","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":3389,"srcUserName":"Hickle1847","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4168,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"ef:be:94:c0:e0:bb","destPort":2435,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"45982401393664236570520745895612","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"387955601992309997","sqlLen":62,"srcAddress":"111.160.31.207","srcGeoCity":"金华","srcMacAddress":"e1:97:dc:6b:1a:14","srcPort":8062,"srcUserName":"Ebert9618","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7851,"databaseName":"ORCL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"245.157.200.64","destMacAddress":"58:55:8d:ba:07:0b","destPort":7350,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"35227763185530042657229478294938","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"702257227621064711","sqlLen":107,"srcAddress":"149.31.238.164","srcGeoCity":"深圳","srcMacAddress":"bd:76:95:76:dc:75","srcPort":4964,"srcUserName":"Gislason1121","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5407,"databaseName":"gp","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"154.23.161.161","destMacAddress":"7c:5a:6a:90:d6:26","destPort":8653,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"68022237356082590566325634372803","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"328539583537271266","sqlLen":189,"srcAddress":"96.167.123.16","srcGeoCity":"宁波","srcMacAddress":"e1:97:dc:6b:1a:14","srcPort":8654,"srcUserName":"Cronin5194","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2958,"databaseName":"DB2","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"42:ef:cc:37:90:fd","destPort":8985,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"50764823304513232124426824135847","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"409270960968000657","sqlLen":32,"srcAddress":"79.63.99.227","srcGeoCity":"北京","srcMacAddress":"01:27:b1:26:06:9d","srcPort":7459,"srcUserName":"Lind2897","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2107,"databaseName":"Clickhouse","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"18.19.76.32","destMacAddress":"48:ed:b1:09:1e:0e","destPort":6426,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"12905857133009110485315157914909","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"945919204022524471","sqlLen":65,"srcAddress":"168.182.180.60","srcGeoCity":"金华","srcMacAddress":"8c:92:cb:be:0f:c5","srcPort":9187,"srcUserName":"Kessler4694","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2379,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"180.78.203.172","destMacAddress":"02:da:86:03:80:d7","destPort":2444,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"98397136125208238562712081101774","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"378640302990461850","sqlLen":70,"srcAddress":"126.122.37.185","srcGeoCity":"上海","srcMacAddress":"eb:e7:a9:ee:ea:f3","srcPort":1654,"srcUserName":"Abernathy9773","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2463,"databaseName":"DB2","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"200.166.168.76","destMacAddress":"2a:a9:74:cd:e7:4d","destPort":4890,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"98946787253521853127258551400334","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"616993590356683893","sqlLen":193,"srcAddress":"126.122.37.185","srcGeoCity":"金华","srcMacAddress":"3b:8d:51:1d:b1:14","srcPort":7414,"srcUserName":"Jenkins1161","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3361,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"237.136.204.82","destMacAddress":"83:e3:e3:77:33:bc","destPort":9881,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"16850729676450827623363386053561","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"814240788737913946","sqlLen":73,"srcAddress":"149.31.238.164","srcGeoCity":"上海","srcMacAddress":"eb:e7:a9:ee:ea:f3","srcPort":9808,"srcUserName":"Homenick2315","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1403,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.225.192.29","destMacAddress":"59:4b:5a:cf:ad:c2","destPort":9124,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"78418272578045266220193864995544","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"857735472356487848","sqlLen":196,"srcAddress":"156.192.154.196","srcGeoCity":"金华","srcMacAddress":"e5:78:71:2a:dc:c8","srcPort":9791,"srcUserName":"Littel5137","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4246,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"26.101.116.201","destMacAddress":"3f:6f:9b:38:b3:f8","destPort":3536,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"84057481247288258478683535801110","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"760785951730733262","sqlLen":155,"srcAddress":"28.111.16.147","srcGeoCity":"上海","srcMacAddress":"dc:7f:e9:d5:33:c4","srcPort":6500,"srcUserName":"Kovacek5641","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7925,"databaseName":"gp","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"172.186.253.51","destMacAddress":"ef:be:94:c0:e0:bb","destPort":5439,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"23050664370100679976788356965515","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"953813470116252085","sqlLen":182,"srcAddress":"185.70.36.6","srcGeoCity":"杭州","srcMacAddress":"9c:c7:61:a4:95:60","srcPort":1337,"srcUserName":"Shanahan5210","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7796,"databaseName":"gp","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"f1:4d:43:d2:52:7a","destPort":574,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"91570732890196313222710443161941","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"968981342207174038","sqlLen":82,"srcAddress":"255.65.169.110","srcGeoCity":"金华","srcMacAddress":"39:cf:4d:1b:fa:b5","srcPort":9787,"srcUserName":"Berge3858","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4730,"databaseName":"mssql","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"26.101.116.201","destMacAddress":"9c:0b:05:33:66:76","destPort":3041,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"15001910935494632598396182960416","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"222217075671610400","sqlLen":43,"srcAddress":"111.160.31.207","srcGeoCity":"金华","srcMacAddress":"9c:c7:61:a4:95:60","srcPort":2436,"srcUserName":"Blick6768","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6046,"databaseName":"orcl","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"99.19.85.58","destMacAddress":"83:e3:e3:77:33:bc","destPort":8064,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"81035755259900629934102161015531","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"563128474628526733","sqlLen":1,"srcAddress":"9.152.245.69","srcGeoCity":"宁波","srcMacAddress":"39:cf:4d:1b:fa:b5","srcPort":1866,"srcUserName":"McKenzie9784","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1604,"databaseName":"gp","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":963,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"07180056151046235839451370393871","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"894718027191801802","sqlLen":189,"srcAddress":"133.227.119.168","srcGeoCity":"宁波","srcMacAddress":"09:2d:de:3e:5b:ed","srcPort":1337,"srcUserName":"Ryan6276","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2801,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"e2:4e:59:c0:84:e7","destPort":7217,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"36041107083087752216649304719899","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"850609065430764322","sqlLen":97,"srcAddress":"123.149.19.219","srcGeoCity":"宁波","srcMacAddress":"0f:53:a2:85:4f:1e","srcPort":4138,"srcUserName":"Purdy9903","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8576,"databaseName":"ES","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"57.101.9.104","destMacAddress":"3d:09:21:bc:f4:9d","destPort":4406,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"13542517335922611636325607376038","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"196383783571763325","sqlLen":167,"srcAddress":"205.27.205.163","srcGeoCity":"杭州","srcMacAddress":"56:e3:3f:25:e4:57","srcPort":790,"srcUserName":"Leffler9138","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1855,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"92:03:d6:cf:be:50","destPort":3088,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"95781399529072138467796214151290","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"840239313898033709","sqlLen":38,"srcAddress":"6.207.29.121","srcGeoCity":"金华","srcMacAddress":"87:09:77:fc:5c:55","srcPort":2339,"srcUserName":"Botsford6581","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":278,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"207.203.167.155","destMacAddress":"e1:4e:4f:2a:e4:c7","destPort":9967,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"02635544717340949395824566331524","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"938524668365368131","sqlLen":97,"srcAddress":"218.236.193.2","srcGeoCity":"宁波","srcMacAddress":"0f:53:a2:85:4f:1e","srcPort":5516,"srcUserName":"Leffler9138","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3042,"databaseName":"MySQL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"ef:be:94:c0:e0:bb","destPort":8182,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"84475140236017946520704839708927","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"984622973013805976","sqlLen":169,"srcAddress":"13.154.191.2","srcGeoCity":"金华","srcMacAddress":"e5:72:a2:9d:aa:e0","srcPort":7108,"srcUserName":"Gaylord3559","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6060,"databaseName":"mssql","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"8a:fd:43:96:a7:b9","destPort":776,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"83089006244067317538650056986338","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"544166178890842836","sqlLen":177,"srcAddress":"228.159.255.221","srcGeoCity":"金华","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":8560,"srcUserName":"Torphy3870","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3964,"databaseName":"Oracle","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"f6:14:60:0b:9e:10","destPort":9939,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"48518480867987075460107002387892","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"003184540624134823","sqlLen":0,"srcAddress":"67.213.112.79","srcGeoCity":"深圳","srcMacAddress":"37:72:dd:81:99:ed","srcPort":889,"srcUserName":"McLaughlin8747","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2546,"databaseName":"Clickhouse","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"8e:88:13:03:63:3e","destPort":736,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"77848473762742914586247256522077","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"567961947416878836","sqlLen":72,"srcAddress":"66.243.193.50","srcGeoCity":"上海","srcMacAddress":"fc:61:69:20:ae:a7","srcPort":8311,"srcUserName":"Wiza7079","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9185,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"97:78:ad:df:42:34","destPort":2657,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"23055674953968171141468321349991","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"009516601669976282","sqlLen":25,"srcAddress":"36.29.42.142","srcGeoCity":"华盛顿","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":4457,"srcUserName":"Kuphal4706","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7876,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"3d:09:21:bc:f4:9d","destPort":987,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"77554362326632895405353619065947","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"425800174507175343","sqlLen":56,"srcAddress":"66.243.193.50","srcGeoCity":"深圳","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":271,"srcUserName":"Heller4160","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3257,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"2.43.79.254","destMacAddress":"e1:4e:4f:2a:e4:c7","destPort":7311,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"53140801676414059172379037065843","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"975183288723480756","sqlLen":44,"srcAddress":"77.71.9.207","srcGeoCity":"深圳","srcMacAddress":"92:d1:ee:18:c0:a5","srcPort":4931,"srcUserName":"Steuber6439","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4237,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"40.44.91.222","destMacAddress":"83:e3:e3:77:33:bc","destPort":5371,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"13421070018047091224801371002703","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"222369061952924706","sqlLen":175,"srcAddress":"56.81.252.53","srcGeoCity":"金华","srcMacAddress":"20:42:79:d2:33:68","srcPort":5517,"srcUserName":"Cronin6638","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4472,"databaseName":"mongoDB","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"135.7.168.2","destMacAddress":"94:d8:e5:2f:c8:57","destPort":2913,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"28416352048656920615144858980613","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"822529295264369367","sqlLen":62,"srcAddress":"228.159.255.221","srcGeoCity":"杭州","srcMacAddress":"39:cf:4d:1b:fa:b5","srcPort":3837,"srcUserName":"Leffler9138","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4020,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"97:78:ad:df:42:34","destPort":4501,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"21229584712247750028467618842461","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"470750132337814530","sqlLen":97,"srcAddress":"123.149.19.219","srcGeoCity":"北京","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":8861,"srcUserName":"Heaney4671","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5326,"databaseName":"DB2","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"94:d8:e5:2f:c8:57","destPort":2459,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"35177086944252642529127416022993","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"915833925553063003","sqlLen":169,"srcAddress":"128.80.31.147","srcGeoCity":"金华","srcMacAddress":"3c:61:2e:89:91:f4","srcPort":9316,"srcUserName":"Hyatt9769","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6796,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.37.58.114","destMacAddress":"42:ef:cc:37:90:fd","destPort":3806,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"27190323147450985835064380054522","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"873286142069406690","sqlLen":23,"srcAddress":"173.41.94.143","srcGeoCity":"杭州","srcMacAddress":"fa:13:b1:95:72:b8","srcPort":7644,"srcUserName":"OReilly7488","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2284,"databaseName":"DB2","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"66.119.162.251","destMacAddress":"42:ef:cc:37:90:fd","destPort":2694,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"27824803316764539246420184092022","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"818249697527591435","sqlLen":89,"srcAddress":"123.149.19.219","srcGeoCity":"杭州","srcMacAddress":"89:67:0e:ee:f6:25","srcPort":8400,"srcUserName":"Smitham9467","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6458,"databaseName":"mssql","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"f6:14:60:0b:9e:10","destPort":4995,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"41503540489721407799284855814163","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"423263283520656486","sqlLen":43,"srcAddress":"66.243.193.50","srcGeoCity":"华盛顿","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":6664,"srcUserName":"Cartwright5260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":818,"databaseName":"ORCL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"0d:33:f2:ba:82:59","destPort":8887,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"15793112714359382871980232078831","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"742832430652103827","sqlLen":55,"srcAddress":"193.196.217.226","srcGeoCity":"华盛顿","srcMacAddress":"00:4d:24:4f:b6:65","srcPort":4755,"srcUserName":"Homenick2315","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4001,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"07:5d:0d:08:c8:87","destPort":8708,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"01643043852569447170145168774529","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"244544401853628741","sqlLen":63,"srcAddress":"149.31.238.164","srcGeoCity":"上海","srcMacAddress":"45:6e:34:3c:a9:7c","srcPort":1828,"srcUserName":"Ryan5711","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9612,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.225.192.29","destMacAddress":"0e:4b:74:c9:0c:8b","destPort":115,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"82806237935762340409264632843757","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"869871252158366836","sqlLen":162,"srcAddress":"47.11.16.170","srcGeoCity":"深圳","srcMacAddress":"10:ef:e1:cc:8b:0d","srcPort":3377,"srcUserName":"Mayert5514","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6251,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"172.186.253.51","destMacAddress":"e1:4e:4f:2a:e4:c7","destPort":8840,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"00291282465554778426615488331554","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"992576791579063646","sqlLen":110,"srcAddress":"193.196.217.226","srcGeoCity":"华盛顿","srcMacAddress":"eb:e7:a9:ee:ea:f3","srcPort":6399,"srcUserName":"Deckow2124","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7157,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"11.156.64.137","destMacAddress":"99:48:f8:7c:c9:4b","destPort":4870,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"52446929709575658911428354361990","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"988820828752878196","sqlLen":20,"srcAddress":"111.160.31.207","srcGeoCity":"宁波","srcMacAddress":"3b:8d:51:1d:b1:14","srcPort":552,"srcUserName":"Cartwright5260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5715,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"242.155.33.250","destMacAddress":"7d:ac:a2:8f:f9:9c","destPort":971,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"63851116218920781146643330675394","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"817763433937778595","sqlLen":9,"srcAddress":"241.66.188.167","srcGeoCity":"北京","srcMacAddress":"fc:61:69:20:ae:a7","srcPort":4459,"srcUserName":"Torphy3870","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":815,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"200.166.168.76","destMacAddress":"22:29:10:75:71:91","destPort":9656,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"26093826642390148919583248588832","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"444263042171743986","sqlLen":119,"srcAddress":"67.213.112.79","srcGeoCity":"北京","srcMacAddress":"89:67:0e:ee:f6:25","srcPort":7278,"srcUserName":"Beahan2140","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1641,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"215.1.149.24","destMacAddress":"36:92:b6:b5:44:40","destPort":3153,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"55760229673405720123630509180600","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"542455331419361292","sqlLen":14,"srcAddress":"245.0.251.226","srcGeoCity":"上海","srcMacAddress":"45:6e:34:3c:a9:7c","srcPort":7350,"srcUserName":"Ryan6276","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3578,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"248.73.84.60","destMacAddress":"4a:94:c0:2c:f0:63","destPort":50,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"90932249903080943282986682503540","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"291537896853413701","sqlLen":111,"srcAddress":"251.208.78.91","srcGeoCity":"LA","srcMacAddress":"b2:ba:e7:87:75:be","srcPort":1579,"srcUserName":"Gaylord3559","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3504,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"207.203.167.155","destMacAddress":"07:5d:0d:08:c8:87","destPort":3280,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"75273703252983723928776763542935","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"542705288228549297","sqlLen":113,"srcAddress":"185.70.36.6","srcGeoCity":"LA","srcMacAddress":"c7:3b:e3:e9:f9:c6","srcPort":9447,"srcUserName":"Ryan6276","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4757,"databaseName":"DB2","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"152.128.98.172","destMacAddress":"3b:f4:05:43:17:ae","destPort":5473,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"24215189104224362371914478104286","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"430920592002550682","sqlLen":109,"srcAddress":"67.213.112.79","srcGeoCity":"宁波","srcMacAddress":"8c:92:cb:be:0f:c5","srcPort":3236,"srcUserName":"Cartwright5260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3254,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"154.23.161.161","destMacAddress":"b5:ae:92:d8:63:f4","destPort":820,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"12619841956649075082790620237992","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"942946543188764513","sqlLen":52,"srcAddress":"243.126.129.153","srcGeoCity":"杭州","srcMacAddress":"01:27:b1:26:06:9d","srcPort":9751,"srcUserName":"Heller4160","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":539,"databaseName":"ORCL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"148.253.208.204","destMacAddress":"99:48:f8:7c:c9:4b","destPort":9,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"81107634653594154617531601404863","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"312105956323399451","sqlLen":181,"srcAddress":"185.70.36.6","srcGeoCity":"杭州","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":9142,"srcUserName":"Robel9303","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5248,"databaseName":"ES","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"26.101.116.201","destMacAddress":"f1:4d:43:d2:52:7a","destPort":645,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"46417528663918960868351417569477","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"404670931660423106","sqlLen":126,"srcAddress":"188.22.232.152","srcGeoCity":"华盛顿","srcMacAddress":"cf:ef:62:85:c1:ef","srcPort":2449,"srcUserName":"Heller4160","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3548,"databaseName":"Clickhouse","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"51.50.241.87","destMacAddress":"3f:6f:9b:38:b3:f8","destPort":3293,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"16855209394775766644797938826481","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"337192566685333047","sqlLen":3,"srcAddress":"11.51.151.141","srcGeoCity":"宁波","srcMacAddress":"4e:02:ce:80:15:c7","srcPort":2244,"srcUserName":"Hagenes3755","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1770,"databaseName":"orcl","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"213.200.58.53","destMacAddress":"b5:ae:92:d8:63:f4","destPort":5859,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"88691274121050760851475138320113","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"169485008604885118","sqlLen":81,"srcAddress":"149.31.238.164","srcGeoCity":"杭州","srcMacAddress":"79:ce:b2:7f:85:a2","srcPort":9029,"srcUserName":"Leffler7946","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Network","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4113,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"184.73.109.27","destMacAddress":"0d:33:f2:ba:82:59","destPort":5510,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"87438755294992023828281264687477","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"609280395444062348","sqlLen":128,"srcAddress":"218.236.193.2","srcGeoCity":"LA","srcMacAddress":"3c:61:2e:89:91:f4","srcPort":4529,"srcUserName":"Gislason1121","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2292,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"245.157.200.64","destMacAddress":"3f:6f:9b:38:b3:f8","destPort":5932,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"00007820494084514968408151166937","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"752468413154007626","sqlLen":151,"srcAddress":"157.139.222.16","srcGeoCity":"华盛顿","srcMacAddress":"8c:92:cb:be:0f:c5","srcPort":3395,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5812,"databaseName":"ORCL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"71.221.108.180","destMacAddress":"fb:7a:ae:84:f6:c4","destPort":9615,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"67083254266075251430867756129813","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"332873643260444699","sqlLen":122,"srcAddress":"28.203.245.176","srcGeoCity":"杭州","srcMacAddress":"07:b6:c0:11:e2:24","srcPort":504,"srcUserName":"Veum7930","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6446,"databaseName":"MySQL","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"236.13.238.183","destMacAddress":"59:4b:5a:cf:ad:c2","destPort":7356,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"65025295342826276251129087671261","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"773853192697226941","sqlLen":110,"srcAddress":"28.111.16.147","srcGeoCity":"金华","srcMacAddress":"87:09:77:fc:5c:55","srcPort":1524,"srcUserName":"Kunze7805","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5795,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"26.101.116.201","destMacAddress":"0e:4b:74:c9:0c:8b","destPort":2960,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"63009733964016085114036296293108","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"378853117407954814","sqlLen":8,"srcAddress":"126.122.37.185","srcGeoCity":"北京","srcMacAddress":"9e:16:86:bf:5c:e9","srcPort":770,"srcUserName":"Hickle1847","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1153,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"e8:1a:46:62:17:80","destPort":8940,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"66852354262195077481864306449217","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"194008339847696957","sqlLen":127,"srcAddress":"218.236.193.2","srcGeoCity":"北京","srcMacAddress":"b2:ba:e7:87:75:be","srcPort":8814,"srcUserName":"Jenkins1161","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4054,"databaseName":"mongoDB","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"207.203.167.155","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":3601,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"38711318118583182918957614144854","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"596264558301725710","sqlLen":172,"srcAddress":"214.240.181.133","srcGeoCity":"北京","srcMacAddress":"cf:ef:62:85:c1:ef","srcPort":7853,"srcUserName":"Cartwright7963","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3845,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"6.255.150.201","destMacAddress":"0c:dc:e8:ef:9c:bd","destPort":8551,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"17022470238836266096072776954306","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"407238472916813842","sqlLen":41,"srcAddress":"67.213.112.79","srcGeoCity":"深圳","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":7105,"srcUserName":"Collier9399","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":570,"databaseName":"ES","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"66.119.162.251","destMacAddress":"2a:a9:74:cd:e7:4d","destPort":2071,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"98983309547793779016685857952142","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"260503381303421811","sqlLen":166,"srcAddress":"241.66.188.167","srcGeoCity":"上海","srcMacAddress":"09:2d:de:3e:5b:ed","srcPort":4110,"srcUserName":"Botsford6581","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4008,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"40.44.91.222","destMacAddress":"ef:be:94:c0:e0:bb","destPort":6650,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"99194559135031803473716764861560","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"718932349904332531","sqlLen":8,"srcAddress":"111.160.31.207","srcGeoCity":"深圳","srcMacAddress":"01:27:b1:26:06:9d","srcPort":5923,"srcUserName":"DuBuque5652","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":13,"databaseName":"Clickhouse","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"3d:09:21:bc:f4:9d","destPort":5460,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"87707327862575737415004412065467","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"696120229013181507","sqlLen":65,"srcAddress":"149.31.238.164","srcGeoCity":"华盛顿","srcMacAddress":"09:2d:de:3e:5b:ed","srcPort":3052,"srcUserName":"Kiehn1022","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7651,"databaseName":"DB2","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"66.119.162.251","destMacAddress":"c4:b4:18:34:ad:0e","destPort":2288,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"50103587529366135460810765735490","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"881005715982833971","sqlLen":146,"srcAddress":"190.48.133.235","srcGeoCity":"深圳","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":8813,"srcUserName":"Gusikowski1971","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":31,"databaseName":"Clickhouse","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"215.1.149.24","destMacAddress":"7d:ac:a2:8f:f9:9c","destPort":2897,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"18320561838582934657393116742422","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"280954544897190740","sqlLen":149,"srcAddress":"193.196.217.226","srcGeoCity":"杭州","srcMacAddress":"eb:e7:a9:ee:ea:f3","srcPort":6546,"srcUserName":"Glover7281","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":162,"databaseName":"gp","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"64.8.219.94","destMacAddress":"0c:dc:e8:ef:9c:bd","destPort":4980,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"64019181301939349906066957825191","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"258853503833043986","sqlLen":131,"srcAddress":"10.131.28.89","srcGeoCity":"上海","srcMacAddress":"2c:85:91:8e:ed:c2","srcPort":2615,"srcUserName":"Hansen4427","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3876,"databaseName":"mongoDB","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"248.73.84.60","destMacAddress":"32:97:e6:e4:41:2f","destPort":2356,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"95685198218368579038787227621819","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"243627809459872306","sqlLen":141,"srcAddress":"127.70.221.110","srcGeoCity":"上海","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":1552,"srcUserName":"Cronin6638","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2558,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"135.7.168.2","destMacAddress":"8e:88:13:03:63:3e","destPort":5675,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"61048355341421895083485061517055","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"159919469503433575","sqlLen":141,"srcAddress":"126.122.37.185","srcGeoCity":"北京","srcMacAddress":"16:2e:fa:45:17:4b","srcPort":3306,"srcUserName":"Bogan4702","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9610,"databaseName":"mssql","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"73.200.164.5","destMacAddress":"0e:4b:74:c9:0c:8b","destPort":3507,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"51527830086058396256713377825062","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"897253841544149637","sqlLen":181,"srcAddress":"67.213.112.79","srcGeoCity":"深圳","srcMacAddress":"73:33:41:15:54:05","srcPort":2446,"srcUserName":"Corwin8681","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9343,"databaseName":"orcl","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"242.155.33.250","destMacAddress":"3d:09:21:bc:f4:9d","destPort":6030,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"64395547450777438309922802518348","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"123130091883016389","sqlLen":93,"srcAddress":"188.22.232.152","srcGeoCity":"北京","srcMacAddress":"8c:92:cb:be:0f:c5","srcPort":6935,"srcUserName":"Bernier3146","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Network","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4282,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"48:ed:b1:09:1e:0e","destPort":3658,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"79326630922662821618238675296881","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"065460747602316782","sqlLen":86,"srcAddress":"168.182.180.60","srcGeoCity":"杭州","srcMacAddress":"96:b6:a4:ee:de:62","srcPort":5932,"srcUserName":"Blick6768","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5904,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"3d:09:21:bc:f4:9d","destPort":7667,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"85503830281802421566573359907520","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"603237837752167461","sqlLen":106,"srcAddress":"6.207.29.121","srcGeoCity":"深圳","srcMacAddress":"bd:76:95:76:dc:75","srcPort":7234,"srcUserName":"Glover7281","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":961,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"184.73.109.27","destMacAddress":"ca:5b:79:0f:ed:bb","destPort":2761,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"30422951647576202831385057964153","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"557465872519043947","sqlLen":61,"srcAddress":"241.66.188.167","srcGeoCity":"LA","srcMacAddress":"00:4d:24:4f:b6:65","srcPort":6163,"srcUserName":"Osinski6144","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9008,"databaseName":"pg","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"128.106.115.232","destMacAddress":"3b:a8:0e:11:b9:9c","destPort":6659,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"80173226041665227083266031216436","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"549475515271830126","sqlLen":196,"srcAddress":"149.31.238.164","srcGeoCity":"华盛顿","srcMacAddress":"9e:16:86:bf:5c:e9","srcPort":2402,"srcUserName":"Gusikowski1971","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8354,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"48:ed:b1:09:1e:0e","destPort":6520,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"85866303047224743740052052450382","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"219437368671328294","sqlLen":172,"srcAddress":"9.152.245.69","srcGeoCity":"北京","srcMacAddress":"e1:97:dc:6b:1a:14","srcPort":4328,"srcUserName":"Deckow2124","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6803,"databaseName":"ORCL","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"246.166.36.199","destMacAddress":"02:da:86:03:80:d7","destPort":7703,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"08507021560533013432048290494252","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"756278852152394935","sqlLen":139,"srcAddress":"36.29.42.142","srcGeoCity":"华盛顿","srcMacAddress":"b1:32:5d:66:d6:cd","srcPort":2478,"srcUserName":"Kiehn1022","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9096,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"122.100.26.84","destMacAddress":"92:03:d6:cf:be:50","destPort":2641,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"17625184115586726440964963296915","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"319057864374264888","sqlLen":160,"srcAddress":"79.63.99.227","srcGeoCity":"上海","srcMacAddress":"61:28:f2:a7:b6:66","srcPort":3126,"srcUserName":"Heller4160","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1364,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"160.129.93.197","destMacAddress":"6e:d3:9c:db:7e:cf","destPort":2096,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"84808061025620650213560323209709","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"116020484062429307","sqlLen":73,"srcAddress":"123.247.6.39","srcGeoCity":"杭州","srcMacAddress":"89:67:0e:ee:f6:25","srcPort":2016,"srcUserName":"Corwin8681","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5355,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"0d:33:f2:ba:82:59","destPort":7687,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"86968305080987146145733300965709","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"123250957569979643","sqlLen":73,"srcAddress":"13.154.191.2","srcGeoCity":"华盛顿","srcMacAddress":"bd:76:95:76:dc:75","srcPort":9527,"srcUserName":"Lind5840","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":252,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"207.203.167.155","destMacAddress":"aa:86:86:ca:3c:9a","destPort":2437,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"34965298835327764414427362234448","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"717541406292983655","sqlLen":149,"srcAddress":"9.152.245.69","srcGeoCity":"北京","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":5377,"srcUserName":"Blick6768","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":302,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"18.19.76.32","destMacAddress":"4a:94:c0:2c:f0:63","destPort":7547,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"36962137589065740138576405859069","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"459549293628702877","sqlLen":111,"srcAddress":"56.81.252.53","srcGeoCity":"北京","srcMacAddress":"b2:a0:fb:c6:02:67","srcPort":7756,"srcUserName":"Upton9354","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8889,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"11.156.64.137","destMacAddress":"3f:6f:9b:38:b3:f8","destPort":2811,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"37867655917705426236214045577659","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"062300880386401975","sqlLen":73,"srcAddress":"3.245.156.70","srcGeoCity":"金华","srcMacAddress":"cf:81:66:aa:7e:52","srcPort":7428,"srcUserName":"Hickle1847","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5940,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"152.128.98.172","destMacAddress":"e8:1a:46:62:17:80","destPort":1815,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"40402763121739573825920657618711","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"839944783120202713","sqlLen":150,"srcAddress":"123.149.19.219","srcGeoCity":"上海","srcMacAddress":"9e:16:86:bf:5c:e9","srcPort":57,"srcUserName":"Homenick2315","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":759,"databaseName":"ES","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"180.78.203.172","destMacAddress":"3b:f4:05:43:17:ae","destPort":5707,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"69479747855606166691962277105006","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"346869613725031283","sqlLen":147,"srcAddress":"173.41.94.143","srcGeoCity":"杭州","srcMacAddress":"fa:13:b1:95:72:b8","srcPort":7367,"srcUserName":"Cartwright7963","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1411,"databaseName":"MySQL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"49.28.210.244","destMacAddress":"48:ed:b1:09:1e:0e","destPort":5486,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"81830451479215285453995858136846","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"635644972343521300","sqlLen":97,"srcAddress":"205.27.205.163","srcGeoCity":"杭州","srcMacAddress":"09:2d:de:3e:5b:ed","srcPort":1086,"srcUserName":"Jenkins3888","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4090,"databaseName":"Oracle","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"237.136.204.82","destMacAddress":"f1:4d:43:d2:52:7a","destPort":1666,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"73280650346477399959718955356662","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"651396285483023249","sqlLen":143,"srcAddress":"185.70.36.6","srcGeoCity":"LA","srcMacAddress":"bd:31:8f:bf:a7:f2","srcPort":3128,"srcUserName":"Adams9955","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4106,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"135.7.168.2","destMacAddress":"7c:5a:6a:90:d6:26","destPort":3598,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"81934051776790142737022970004325","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"463596497791608308","sqlLen":11,"srcAddress":"66.243.193.50","srcGeoCity":"杭州","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":3975,"srcUserName":"Gaylord3559","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1719,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"52.244.219.229","destMacAddress":"92:03:d6:cf:be:50","destPort":2848,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"67616111482594578147663679921038","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"591700504133145739","sqlLen":105,"srcAddress":"6.207.29.121","srcGeoCity":"金华","srcMacAddress":"96:b6:a4:ee:de:62","srcPort":2073,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2608,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"73.200.164.5","destMacAddress":"22:29:10:75:71:91","destPort":6820,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"56704040090135604300700633243307","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"899676265102729712","sqlLen":166,"srcAddress":"10.131.28.89","srcGeoCity":"北京","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":3375,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4830,"databaseName":"Clickhouse","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"6.255.150.201","destMacAddress":"0e:4b:74:c9:0c:8b","destPort":2449,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"77813996830339933061455681289734","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"404641223293292371","sqlLen":92,"srcAddress":"73.113.63.72","srcGeoCity":"上海","srcMacAddress":"d5:72:24:37:45:e6","srcPort":1943,"srcUserName":"Cronin5194","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5887,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"11.156.64.137","destMacAddress":"e9:fa:a1:57:c9:83","destPort":485,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"26385612022114477950420686316551","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"301550657423076516","sqlLen":11,"srcAddress":"245.0.251.226","srcGeoCity":"深圳","srcMacAddress":"0f:53:a2:85:4f:1e","srcPort":1425,"srcUserName":"Deckow6496","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5214,"databaseName":"ORCL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"75.114.217.89","destMacAddress":"70:16:7a:f4:c1:68","destPort":1654,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"84860889664807674374268768498095","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"138720552608643867","sqlLen":163,"srcAddress":"77.71.9.207","srcGeoCity":"LA","srcMacAddress":"cf:ef:62:85:c1:ef","srcPort":5706,"srcUserName":"Parisian7729","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7759,"databaseName":"MySQL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"195.199.252.114","destMacAddress":"36:92:b6:b5:44:40","destPort":1312,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"26556027928248909507872482938448","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"607763177103892243","sqlLen":196,"srcAddress":"173.41.94.143","srcGeoCity":"深圳","srcMacAddress":"e5:72:a2:9d:aa:e0","srcPort":8125,"srcUserName":"Rutherford9019","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3177,"databaseName":"pg","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"82.90.23.190","destMacAddress":"3d:a0:6d:c1:43:e5","destPort":3087,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"31455491441870313920449842766900","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"289806104568480984","sqlLen":166,"srcAddress":"77.71.9.207","srcGeoCity":"北京","srcMacAddress":"89:67:0e:ee:f6:25","srcPort":4758,"srcUserName":"Kiehn1022","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":1310,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"245.157.200.64","destMacAddress":"0d:33:f2:ba:82:59","destPort":3937,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"75016433400838620864599966891958","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"195840277783152782","sqlLen":80,"srcAddress":"243.126.129.153","srcGeoCity":"宁波","srcMacAddress":"b2:a0:fb:c6:02:67","srcPort":5657,"srcUserName":"Ebert9618","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":3106,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"73.200.164.5","destMacAddress":"f1:4d:43:d2:52:7a","destPort":3325,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"97588114755170473149055930352084","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"583378225875072444","sqlLen":1,"srcAddress":"123.247.6.39","srcGeoCity":"金华","srcMacAddress":"83:dd:9b:e7:5c:24","srcPort":8515,"srcUserName":"Bernier3146","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2565,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"82.90.23.190","destMacAddress":"c4:b4:18:34:ad:0e","destPort":8557,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"09027559830255381592347524173313","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"253054395760431127","sqlLen":68,"srcAddress":"6.207.29.121","srcGeoCity":"上海","srcMacAddress":"4b:21:cd:2b:5f:2a","srcPort":5190,"srcUserName":"Runolfsson2883","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":8623,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"248.73.84.60","destMacAddress":"e5:20:49:85:c9:b7","destPort":8255,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"33931154021449685323430014513413","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"591700465127536751","sqlLen":128,"srcAddress":"9.204.53.243","srcGeoCity":"上海","srcMacAddress":"d4:2f:c9:2e:47:0d","srcPort":3006,"srcUserName":"Steuber6439","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7357,"databaseName":"Oracle","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"3b:f4:05:43:17:ae","destPort":6702,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"20078330708768059875088905702941","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"039963191558535165","sqlLen":153,"srcAddress":"168.182.180.60","srcGeoCity":"北京","srcMacAddress":"fc:61:69:20:ae:a7","srcPort":8573,"srcUserName":"Lubowitz2308","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":6270,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"64.8.219.94","destMacAddress":"48:ed:b1:09:1e:0e","destPort":9942,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"99443619075141243371094275403866","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"085022121540905728","sqlLen":15,"srcAddress":"173.41.94.143","srcGeoCity":"北京","srcMacAddress":"07:b6:c0:11:e2:24","srcPort":2441,"srcUserName":"Mayert5514","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":184,"databaseName":"mssql","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"104.246.250.58","destMacAddress":"2a:a9:74:cd:e7:4d","destPort":6214,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"92193071057717156423308797328133","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"280510765918965914","sqlLen":104,"srcAddress":"147.244.65.123","srcGeoCity":"北京","srcMacAddress":"6a:94:82:4a:a5:64","srcPort":5201,"srcUserName":"Gusikowski1971","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":7846,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"49.28.210.244","destMacAddress":"b5:ae:92:d8:63:f4","destPort":8319,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"48765374241149875295046118365514","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"138411057036943788","sqlLen":110,"srcAddress":"128.80.31.147","srcGeoCity":"北京","srcMacAddress":"79:ce:b2:7f:85:a2","srcPort":2726,"srcUserName":"OReilly7488","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4800,"databaseName":"mssql","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"180.78.203.172","destMacAddress":"8a:fd:43:96:a7:b9","destPort":9614,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"75545311572297311318469339217742","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"895470618586941546","sqlLen":83,"srcAddress":"118.182.13.249","srcGeoCity":"北京","srcMacAddress":"20:99:f4:51:b4:e7","srcPort":3344,"srcUserName":"Schmitt8877","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5312,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"117.65.202.182","destMacAddress":"f6:14:60:0b:9e:10","destPort":6875,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"21481635670748457763828649164803","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"771225928148913705","sqlLen":147,"srcAddress":"185.70.36.6","srcGeoCity":"华盛顿","srcMacAddress":"0f:53:a2:85:4f:1e","srcPort":2515,"srcUserName":"Gusikowski1971","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":313,"databaseName":"gp","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"213.200.58.53","destMacAddress":"0b:b3:f7:45:04:a9","destPort":9957,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"26631249718164280926314279717378","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"494507578862871248","sqlLen":40,"srcAddress":"13.154.191.2","srcGeoCity":"上海","srcMacAddress":"8c:92:cb:be:0f:c5","srcPort":9733,"srcUserName":"Greenfelder4260","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":5535,"databaseName":"MySQL","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"248.73.84.60","destMacAddress":"83:e3:e3:77:33:bc","destPort":6189,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"97575715222137062159407405212501","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"583726582569308905","sqlLen":120,"srcAddress":"218.236.193.2","srcGeoCity":"金华","srcMacAddress":"87:09:77:fc:5c:55","srcPort":1147,"srcUserName":"Cartwright7963","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":2691,"databaseName":"Oracle","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"64.8.219.94","destMacAddress":"7d:ac:a2:8f:f9:9c","destPort":9940,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"09354217218097349411667092137230","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"430449065479898086","sqlLen":50,"srcAddress":"128.80.31.147","srcGeoCity":"杭州","srcMacAddress":"37:72:dd:81:99:ed","srcPort":4120,"srcUserName":"Harris2503","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":9424,"databaseName":"mssql","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"66.119.162.251","destMacAddress":"83:e3:e3:77:33:bc","destPort":1985,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"23092362586457507581418252640351","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"788105283353560777","sqlLen":69,"srcAddress":"214.240.181.133","srcGeoCity":"宁波","srcMacAddress":"87:09:77:fc:5c:55","srcPort":1300,"srcUserName":"Adams9955","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:32:22","costTime":4925,"databaseName":"mongoDB","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"17.73.178.99","destMacAddress":"ca:5b:79:0f:ed:bb","destPort":7271,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:32:22","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"98208630931854589306639591070520","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"990222219702855480","sqlLen":186,"srcAddress":"79.63.99.227","srcGeoCity":"上海","srcMacAddress":"b3:bf:ec:dc:28:23","srcPort":1457,"srcUserName":"Torphy3870","startTime":"2021-07-08 15:32:22","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3398,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"214.59.227.99","destMacAddress":"bd:f7:89:26:75:6e","destPort":8599,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"20398407279222566760154116345007","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"530261009814794870","sqlLen":58,"srcAddress":"209.129.84.194","srcGeoCity":"北京","srcMacAddress":"69:a7:06:11:98:f8","srcPort":7266,"srcUserName":"Hegmann8021","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3322,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"10:da:98:e8:d7:4a","destPort":774,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"70078993893050946634805992444182","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"108123308249498055","sqlLen":18,"srcAddress":"199.46.135.240","srcGeoCity":"华盛顿","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":8699,"srcUserName":"Weissnat8836","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":689,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"d5:64:2f:54:35:6b","destPort":3482,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"80648763747171851333818515028974","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"975365047444963701","sqlLen":62,"srcAddress":"44.16.120.228","srcGeoCity":"金华","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":9276,"srcUserName":"Kuhn6094","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1806,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"79.151.39.186","destMacAddress":"c0:d4:c9:a3:f8:aa","destPort":4792,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"55905285848303826477993382207743","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"191209811892513943","sqlLen":48,"srcAddress":"79.81.237.154","srcGeoCity":"华盛顿","srcMacAddress":"28:f3:02:f9:02:bb","srcPort":7468,"srcUserName":"Fay7628","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6673,"databaseName":"ORCL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"7c:93:a9:dc:44:4e","destPort":6676,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"93813221369978538263344195803875","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"767409031988199920","sqlLen":74,"srcAddress":"16.191.137.122","srcGeoCity":"杭州","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":9295,"srcUserName":"Brakus6226","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2222,"databaseName":"pg","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"c2:38:70:d4:bf:0c","destPort":9041,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"64407444519425783493684051845612","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"447220434754823671","sqlLen":122,"srcAddress":"183.252.146.136","srcGeoCity":"北京","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":2900,"srcUserName":"Orn6863","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1470,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"fb:a4:ee:63:77:63","destPort":2748,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"84507408798377944890083103559495","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"022725813164060275","sqlLen":191,"srcAddress":"162.146.4.133","srcGeoCity":"北京","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":4053,"srcUserName":"Roob8151","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8299,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"8.5.71.232","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":148,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"91216901441498220129595358111461","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"130694774318695684","sqlLen":100,"srcAddress":"164.214.139.64","srcGeoCity":"深圳","srcMacAddress":"28:f3:02:f9:02:bb","srcPort":3573,"srcUserName":"Reilly8546","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6671,"databaseName":"mssql","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"98:37:31:2c:f2:b3","destPort":3207,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"46747189504166516747500101975163","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"476572761704016719","sqlLen":177,"srcAddress":"94.248.245.183","srcGeoCity":"北京","srcMacAddress":"f8:d0:c6:bd:41:50","srcPort":4812,"srcUserName":"Gerhold9032","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6074,"databaseName":"MySQL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"64.101.19.37","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":746,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"66419737430045751466849448237154","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"080866539403864831","sqlLen":25,"srcAddress":"46.86.184.134","srcGeoCity":"金华","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":7233,"srcUserName":"Bartell3239","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8897,"databaseName":"pg","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"7c:cb:99:ce:cf:26","destPort":675,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"04845949711354574457013016828177","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"635029041413690923","sqlLen":192,"srcAddress":"163.215.63.82","srcGeoCity":"华盛顿","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":699,"srcUserName":"Hartmann3192","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4153,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"45.162.114.235","destMacAddress":"be:a6:b2:92:5d:d3","destPort":8214,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"53628864598898614310599255665874","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"455384204505793614","sqlLen":29,"srcAddress":"79.81.237.154","srcGeoCity":"金华","srcMacAddress":"70:3e:cc:cd:6c:a6","srcPort":2081,"srcUserName":"Dietrich1947","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4392,"databaseName":"gp","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"79.151.39.186","destMacAddress":"3a:ec:f2:ca:8d:84","destPort":4622,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"77324188111451275438200498646535","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"465532497391855494","sqlLen":102,"srcAddress":"164.214.139.64","srcGeoCity":"华盛顿","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":9992,"srcUserName":"Sawayn4170","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3763,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":2631,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"61016714381497504590543090840654","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"300128022925040484","sqlLen":151,"srcAddress":"96.233.148.221","srcGeoCity":"北京","srcMacAddress":"7f:a7:b8:35:31:5e","srcPort":466,"srcUserName":"Roob8151","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9661,"databaseName":"mongoDB","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"42.195.216.71","destMacAddress":"f5:f3:eb:53:1d:0a","destPort":4390,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"83683977237676137290013830784067","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"703877120181545866","sqlLen":76,"srcAddress":"232.180.188.17","srcGeoCity":"金华","srcMacAddress":"9e:81:53:3b:00:33","srcPort":7841,"srcUserName":"Von5745","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4157,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":9345,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"07030901281615304202017621836977","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"075655684934218033","sqlLen":192,"srcAddress":"232.180.188.17","srcGeoCity":"LA","srcMacAddress":"a9:53:cb:63:8f:d7","srcPort":2436,"srcUserName":"Rath1486","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6817,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"113.176.40.38","destMacAddress":"ce:91:21:b2:1a:8c","destPort":5981,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"62060415202710607251279710869890","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"170994521034440704","sqlLen":151,"srcAddress":"159.146.125.159","srcGeoCity":"深圳","srcMacAddress":"4e:e2:ea:70:0b:5e","srcPort":6876,"srcUserName":"Schroeder8657","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6707,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"34.217.7.133","destMacAddress":"ce:04:75:1b:fc:dd","destPort":7000,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"34756950785106293841244985739070","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"378270092596035000","sqlLen":69,"srcAddress":"239.152.242.173","srcGeoCity":"宁波","srcMacAddress":"79:84:1e:5d:af:1d","srcPort":4565,"srcUserName":"Flatley7972","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7084,"databaseName":"pg","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"214.59.227.99","destMacAddress":"7c:cb:99:ce:cf:26","destPort":9718,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"42211891934877283174314726508243","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"020655350359872403","sqlLen":70,"srcAddress":"232.211.111.182","srcGeoCity":"杭州","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":3644,"srcUserName":"Gulgowski7239","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9662,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"199.143.230.203","destMacAddress":"57:96:c1:08:a1:29","destPort":686,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"25898067357778021208827128864706","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"247171628931378933","sqlLen":22,"srcAddress":"147.67.110.36","srcGeoCity":"上海","srcMacAddress":"79:50:13:2c:a2:98","srcPort":9725,"srcUserName":"Paucek4501","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8260,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"85.253.54.21","destMacAddress":"57:96:c1:08:a1:29","destPort":8879,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"29878135483186065140279928220943","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"353187489653058822","sqlLen":106,"srcAddress":"179.243.22.221","srcGeoCity":"LA","srcMacAddress":"f9:30:b2:e9:1c:d6","srcPort":3378,"srcUserName":"Orn6863","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3017,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"38.57.235.202","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":4075,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"00921872013239387818860150177009","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"819882157585746823","sqlLen":165,"srcAddress":"110.26.158.229","srcGeoCity":"深圳","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":5260,"srcUserName":"Streich5154","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9351,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"90:f5:42:d7:5f:ca","destPort":6484,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"90491956526863498829424195290464","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"267054950170826382","sqlLen":131,"srcAddress":"232.211.111.182","srcGeoCity":"金华","srcMacAddress":"93:b5:85:1f:cb:d7","srcPort":7689,"srcUserName":"Koelpin6413","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5840,"databaseName":"Oracle","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"48:fb:32:cb:bd:95","destPort":1273,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"19892840161551767012241114502294","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"719632854915324681","sqlLen":104,"srcAddress":"5.136.113.251","srcGeoCity":"宁波","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":6374,"srcUserName":"Keebler5285","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5197,"databaseName":"ES","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"c4:1e:aa:1d:3b:a1","destPort":9095,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"45713132429762180850587231853209","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"731755320370124598","sqlLen":136,"srcAddress":"71.103.58.168","srcGeoCity":"杭州","srcMacAddress":"d5:a4:3c:0d:76:b3","srcPort":8448,"srcUserName":"Nicolas9981","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4202,"databaseName":"ES","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"123.13.111.71","destMacAddress":"b5:c5:9a:c3:2c:53","destPort":2227,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"50182237485343450772136626804777","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"589745953663000521","sqlLen":35,"srcAddress":"67.110.175.201","srcGeoCity":"宁波","srcMacAddress":"df:80:ed:e2:57:d3","srcPort":8832,"srcUserName":"Rutherford1935","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4176,"databaseName":"ES","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"244.80.123.228","destMacAddress":"f6:ee:7e:37:04:e1","destPort":1722,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"23688879126440910729669108532209","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"319868585003957617","sqlLen":83,"srcAddress":"232.180.188.17","srcGeoCity":"杭州","srcMacAddress":"70:3e:cc:cd:6c:a6","srcPort":2176,"srcUserName":"Wuckert6564","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1996,"databaseName":"gp","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"26.230.251.136","destMacAddress":"d5:64:2f:54:35:6b","destPort":4773,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"96309717387244496635607156294722","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"697405910394642299","sqlLen":55,"srcAddress":"46.86.184.134","srcGeoCity":"北京","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":5466,"srcUserName":"Kemmer5764","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2232,"databaseName":"mssql","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"47.250.54.112","destMacAddress":"5b:46:cb:60:55:7f","destPort":9766,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"20027534550473014728697249927251","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"358686601159264434","sqlLen":180,"srcAddress":"67.110.175.201","srcGeoCity":"深圳","srcMacAddress":"d5:a4:3c:0d:76:b3","srcPort":7000,"srcUserName":"Jacobs1896","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6593,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"48:fb:32:cb:bd:95","destPort":1707,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"00497938692754167212141058729847","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"718583031432266411","sqlLen":151,"srcAddress":"240.191.226.235","srcGeoCity":"深圳","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":3664,"srcUserName":"Becker5531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4904,"databaseName":"DM7","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"225.75.224.83","destMacAddress":"c4:1e:aa:1d:3b:a1","destPort":9106,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"88965286797487842243923081453175","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"236123423436890202","sqlLen":164,"srcAddress":"105.117.143.66","srcGeoCity":"北京","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":5795,"srcUserName":"Weissnat8836","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1587,"databaseName":"Oracle","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"45:a6:e6:c1:4e:78","destPort":2594,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"99265128010250734106200232105447","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"793622802438925827","sqlLen":93,"srcAddress":"193.66.60.80","srcGeoCity":"宁波","srcMacAddress":"c2:70:42:3a:b8:76","srcPort":2850,"srcUserName":"Paucek4501","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8110,"databaseName":"ORCL","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"42.195.216.71","destMacAddress":"7c:93:a9:dc:44:4e","destPort":9412,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"69626740741907955685346904513342","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"135252597849336972","sqlLen":194,"srcAddress":"236.89.248.241","srcGeoCity":"宁波","srcMacAddress":"f2:93:97:77:55:70","srcPort":6652,"srcUserName":"Hegmann8021","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8718,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":5900,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"39017692752249477727052470254256","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"164504785121155962","sqlLen":76,"srcAddress":"105.117.143.66","srcGeoCity":"北京","srcMacAddress":"c2:22:e1:bd:47:f3","srcPort":256,"srcUserName":"Hane6737","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7599,"databaseName":"MySQL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"72:72:c8:e5:3c:73","destPort":7653,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"08033291835431057776333308315804","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"416554562049456974","sqlLen":63,"srcAddress":"147.67.110.36","srcGeoCity":"北京","srcMacAddress":"69:a7:06:11:98:f8","srcPort":1024,"srcUserName":"Zemlak9497","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":697,"databaseName":"pg","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"207.5.220.50","destMacAddress":"bd:f7:89:26:75:6e","destPort":6870,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"71803829546216254890771880513251","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"911582701777367885","sqlLen":155,"srcAddress":"190.223.57.93","srcGeoCity":"宁波","srcMacAddress":"d5:a4:3c:0d:76:b3","srcPort":9055,"srcUserName":"Rutherford5539","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7844,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":8529,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"82946040862146048452111672343975","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"322995523316054845","sqlLen":21,"srcAddress":"106.41.211.240","srcGeoCity":"宁波","srcMacAddress":"f2:93:97:77:55:70","srcPort":4876,"srcUserName":"Stokes1036","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5599,"databaseName":"ES","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"92:e5:48:a6:14:70","destPort":9094,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"34327708106520504624557871470556","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"063031696737045762","sqlLen":64,"srcAddress":"103.49.145.139","srcGeoCity":"上海","srcMacAddress":"25:3b:16:83:ba:53","srcPort":7763,"srcUserName":"Kuvalis2993","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9851,"databaseName":"pg","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"23:33:65:d4:8d:15","destPort":290,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"40955228666644834926482882244367","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"579704360799658966","sqlLen":130,"srcAddress":"199.46.135.240","srcGeoCity":"北京","srcMacAddress":"69:a7:06:11:98:f8","srcPort":6974,"srcUserName":"Kuhn6094","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7653,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"ce:04:75:1b:fc:dd","destPort":9352,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"81037397271190930646598740668611","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"739741062400372033","sqlLen":103,"srcAddress":"20.6.8.159","srcGeoCity":"LA","srcMacAddress":"5b:c7:66:49:d6:e6","srcPort":3264,"srcUserName":"Cassin5985","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1787,"databaseName":"ES","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"248.62.146.42","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":448,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"78928768756532514615852903470457","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"962805541144083953","sqlLen":138,"srcAddress":"79.81.237.154","srcGeoCity":"北京","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":7625,"srcUserName":"Fisher7148","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6503,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"c2:38:70:d4:bf:0c","destPort":7726,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"12979738103178793001749530714241","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"745817264824276778","sqlLen":102,"srcAddress":"232.211.111.182","srcGeoCity":"金华","srcMacAddress":"c2:22:e1:bd:47:f3","srcPort":747,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":732,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"ce:04:75:1b:fc:dd","destPort":8510,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"95856762988110432777196436645397","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"784764026084611647","sqlLen":132,"srcAddress":"163.215.63.82","srcGeoCity":"深圳","srcMacAddress":"7f:a7:b8:35:31:5e","srcPort":5530,"srcUserName":"Rutherford1935","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5944,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"70:70:a6:49:2e:6b","destPort":7384,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"29471750305868165700144762779766","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"465158553288617269","sqlLen":89,"srcAddress":"5.136.113.251","srcGeoCity":"深圳","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":4194,"srcUserName":"Dietrich1947","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9983,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"123.13.111.71","destMacAddress":"ce:91:21:b2:1a:8c","destPort":4693,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"88325754006777137557730961020211","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"095324508802805811","sqlLen":28,"srcAddress":"159.146.125.159","srcGeoCity":"宁波","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":5195,"srcUserName":"Damore2102","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4639,"databaseName":"gp","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"85.253.54.21","destMacAddress":"f6:ee:7e:37:04:e1","destPort":6806,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"73604408684633343793504516466762","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"405464110963592070","sqlLen":128,"srcAddress":"232.211.111.182","srcGeoCity":"LA","srcMacAddress":"ca:87:27:64:cf:5a","srcPort":1364,"srcUserName":"Damore2102","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3889,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"131.170.129.230","destMacAddress":"ce:91:21:b2:1a:8c","destPort":9084,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"64687201801307572008791035574623","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"233816407966318206","sqlLen":96,"srcAddress":"221.218.35.8","srcGeoCity":"上海","srcMacAddress":"83:07:76:1f:27:60","srcPort":2514,"srcUserName":"Rutherford5539","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4481,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"206.100.68.134","destMacAddress":"bc:b5:36:a5:29:13","destPort":2504,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"42633252440868727848013791416856","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"995876934505091690","sqlLen":30,"srcAddress":"232.211.111.182","srcGeoCity":"上海","srcMacAddress":"83:07:76:1f:27:60","srcPort":8233,"srcUserName":"Von5745","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3181,"databaseName":"ORCL","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"79.175.7.234","destMacAddress":"98:37:31:2c:f2:b3","destPort":2527,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"03004166531642724235563365211998","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"357397902154528025","sqlLen":46,"srcAddress":"67.110.175.201","srcGeoCity":"金华","srcMacAddress":"e9:03:97:61:5c:f2","srcPort":7662,"srcUserName":"Gulgowski7239","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3371,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"c2:38:70:d4:bf:0c","destPort":4732,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"87813179040696720309421930912016","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"473271691279677525","sqlLen":182,"srcAddress":"50.87.56.91","srcGeoCity":"深圳","srcMacAddress":"25:3b:16:83:ba:53","srcPort":3491,"srcUserName":"Torphy3636","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3437,"databaseName":"mssql","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"8.5.71.232","destMacAddress":"e5:12:aa:12:0e:20","destPort":6633,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"56537209888102880002521385864270","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"236555564442526250","sqlLen":196,"srcAddress":"103.49.145.139","srcGeoCity":"北京","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":2052,"srcUserName":"Gibson8922","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6243,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"28:3e:33:06:54:76","destPort":561,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"18338397524215256236537459705870","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"648641652488024149","sqlLen":144,"srcAddress":"236.89.248.241","srcGeoCity":"上海","srcMacAddress":"ba:8d:4c:25:18:1b","srcPort":7019,"srcUserName":"Cassin2125","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5495,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"ca:48:ab:60:47:41","destPort":6447,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"11705677135768663320304930852056","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"226220496869009517","sqlLen":3,"srcAddress":"45.145.165.225","srcGeoCity":"金华","srcMacAddress":"ec:49:cc:3f:16:c4","srcPort":9727,"srcUserName":"Grimes3123","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6534,"databaseName":"orcl","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"ea:0d:ac:43:c8:94","destPort":4907,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"20505075414912248099101100941933","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"498432735935884324","sqlLen":176,"srcAddress":"158.169.207.92","srcGeoCity":"金华","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":4012,"srcUserName":"Gottlieb4749","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7977,"databaseName":"mongoDB","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"3a:ec:f2:ca:8d:84","destPort":5020,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"91486700773268433788222270916747","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"992509619463422900","sqlLen":189,"srcAddress":"102.71.150.98","srcGeoCity":"华盛顿","srcMacAddress":"69:a7:06:11:98:f8","srcPort":3658,"srcUserName":"Macejkovic4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8778,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"bc:b5:36:a5:29:13","destPort":9409,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"100","eventId":"58413536263658507599639166726492","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"151721478504977602","sqlLen":168,"srcAddress":"105.117.143.66","srcGeoCity":"北京","srcMacAddress":"ee:93:0a:2b:e0:35","srcPort":2294,"srcUserName":"Balistreri7291","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3690,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"28:3e:33:06:54:76","destPort":8987,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"67042651562514508711550259388910","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"287887580691260886","sqlLen":98,"srcAddress":"61.44.230.97","srcGeoCity":"金华","srcMacAddress":"dd:42:45:20:02:bb","srcPort":880,"srcUserName":"Farrell4514","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4897,"databaseName":"mongoDB","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"c2:38:70:d4:bf:0c","destPort":1026,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"14212135689898092812211605621647","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"890974038473152136","sqlLen":59,"srcAddress":"236.89.248.241","srcGeoCity":"杭州","srcMacAddress":"c2:22:e1:bd:47:f3","srcPort":4407,"srcUserName":"Beahan4953","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1165,"databaseName":"mssql","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"173.5.153.239","destMacAddress":"6a:c1:9b:81:7a:10","destPort":4929,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"88616920235338067481666237883586","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"950170251744625207","sqlLen":166,"srcAddress":"67.110.175.201","srcGeoCity":"深圳","srcMacAddress":"3f:fe:6a:2f:17:1b","srcPort":7312,"srcUserName":"Batz3605","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":649,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"e4:95:98:6a:cb:5e","destPort":9569,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"74336730745920079265078509262418","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"954016656669049416","sqlLen":57,"srcAddress":"209.129.84.194","srcGeoCity":"深圳","srcMacAddress":"58:51:9c:4c:56:b5","srcPort":4484,"srcUserName":"Johnston4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3131,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"113.176.40.38","destMacAddress":"c2:38:70:d4:bf:0c","destPort":9242,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"38599420359885461434877762739678","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"101398714574650160","sqlLen":11,"srcAddress":"164.214.139.64","srcGeoCity":"华盛顿","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":1623,"srcUserName":"Zemlak4589","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6460,"databaseName":"mongoDB","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"26.230.251.136","destMacAddress":"45:a6:e6:c1:4e:78","destPort":5218,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"26518678481580256905776872230065","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"419219167505182957","sqlLen":115,"srcAddress":"155.35.19.51","srcGeoCity":"北京","srcMacAddress":"9e:81:53:3b:00:33","srcPort":2984,"srcUserName":"Runolfsson2194","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4312,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"fb:a4:ee:63:77:63","destPort":6572,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"98158327415034719350239472415485","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"964438663794430293","sqlLen":77,"srcAddress":"140.22.119.73","srcGeoCity":"北京","srcMacAddress":"f2:93:97:77:55:70","srcPort":2308,"srcUserName":"Gibson8922","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1927,"databaseName":"MySQL","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"85.253.54.21","destMacAddress":"c4:1e:aa:1d:3b:a1","destPort":2145,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"81978726534608803827868977990688","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"248333864480047460","sqlLen":117,"srcAddress":"79.81.237.154","srcGeoCity":"LA","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":4785,"srcUserName":"Flatley7972","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4339,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"80:09:08:bd:a6:3c","destPort":8905,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"60463885187612728892604275186440","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"542264169063707391","sqlLen":135,"srcAddress":"159.146.125.159","srcGeoCity":"宁波","srcMacAddress":"1c:a9:41:dd:39:9b","srcPort":3700,"srcUserName":"Farrell4514","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9851,"databaseName":"ES","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"131.170.129.230","destMacAddress":"7c:cb:99:ce:cf:26","destPort":8696,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"99615093701811232491000836813353","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"355751131677114128","sqlLen":141,"srcAddress":"50.87.56.91","srcGeoCity":"上海","srcMacAddress":"c2:70:42:3a:b8:76","srcPort":8541,"srcUserName":"Carroll2109","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2586,"databaseName":"mssql","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"ea:0d:ac:43:c8:94","destPort":8966,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"47849075862564336390035223536944","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"714433246690509608","sqlLen":183,"srcAddress":"106.41.211.240","srcGeoCity":"北京","srcMacAddress":"20:f1:10:e6:a7:19","srcPort":778,"srcUserName":"Donnelly6051","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2047,"databaseName":"MySQL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"244.80.123.228","destMacAddress":"d5:64:2f:54:35:6b","destPort":8068,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"65920909957191777314063120375485","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"203821007926641222","sqlLen":191,"srcAddress":"209.129.84.194","srcGeoCity":"上海","srcMacAddress":"ee:93:0a:2b:e0:35","srcPort":6251,"srcUserName":"Stokes1036","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7360,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"57:96:c1:08:a1:29","destPort":8282,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"39009792568280721037595498427446","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"500951414007492659","sqlLen":199,"srcAddress":"96.233.148.221","srcGeoCity":"LA","srcMacAddress":"83:d6:a9:54:e6:31","srcPort":8229,"srcUserName":"Damore2102","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8987,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"98:37:31:2c:f2:b3","destPort":7641,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"91379473903262252631378593832313","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"193017529536779877","sqlLen":90,"srcAddress":"193.66.60.80","srcGeoCity":"北京","srcMacAddress":"79:84:1e:5d:af:1d","srcPort":8614,"srcUserName":"Becker5531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2363,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"c2:38:70:d4:bf:0c","destPort":885,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"65708047922544768391474768175410","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"113720351753889871","sqlLen":9,"srcAddress":"179.243.22.221","srcGeoCity":"华盛顿","srcMacAddress":"6f:1c:68:f3:30:dc","srcPort":7055,"srcUserName":"Kuvalis2993","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":913,"databaseName":"Clickhouse","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"d6:04:cf:00:45:1c","destPort":9883,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"20956189697083996537159519800804","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"430593550485675469","sqlLen":35,"srcAddress":"209.129.84.194","srcGeoCity":"深圳","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":2827,"srcUserName":"Paucek4501","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2246,"databaseName":"pg","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"23.249.79.85","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":770,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"01592783585556975562184793987906","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"429453784304886944","sqlLen":141,"srcAddress":"236.89.248.241","srcGeoCity":"杭州","srcMacAddress":"28:f3:02:f9:02:bb","srcPort":5681,"srcUserName":"Grimes3123","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4175,"databaseName":"Clickhouse","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":7741,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"70005998502348232017952813658130","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"516568591636933696","sqlLen":59,"srcAddress":"105.117.143.66","srcGeoCity":"杭州","srcMacAddress":"6f:1c:68:f3:30:dc","srcPort":1240,"srcUserName":"Ortiz1135","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7997,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"131.170.129.230","destMacAddress":"3a:ec:f2:ca:8d:84","destPort":1995,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"17528110861711436669323654731513","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"644223124585702256","sqlLen":74,"srcAddress":"94.248.245.183","srcGeoCity":"金华","srcMacAddress":"25:3b:16:83:ba:53","srcPort":1351,"srcUserName":"Medhurst3078","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1456,"databaseName":"pg","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"214.59.227.99","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":704,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"07170706583405802852888546173190","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"263563093218250664","sqlLen":72,"srcAddress":"71.103.58.168","srcGeoCity":"金华","srcMacAddress":"ac:50:99:9f:24:3a","srcPort":9663,"srcUserName":"Becker5531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1226,"databaseName":"Clickhouse","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"15.130.46.56","destMacAddress":"98:37:31:2c:f2:b3","destPort":2260,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"31932340758832875980054406064693","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"655019738007063211","sqlLen":149,"srcAddress":"162.146.4.133","srcGeoCity":"LA","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":5437,"srcUserName":"Farrell4514","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9657,"databaseName":"MySQL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"173.5.153.239","destMacAddress":"89:d7:7e:2b:81:fd","destPort":5631,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"22937966013853366762417180523318","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"990346624820672440","sqlLen":172,"srcAddress":"155.35.19.51","srcGeoCity":"北京","srcMacAddress":"2c:ea:04:b2:50:17","srcPort":693,"srcUserName":"Streich4436","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2724,"databaseName":"MySQL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"152.52.212.86","destMacAddress":"bd:f7:89:26:75:6e","destPort":8399,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"83746370894135692681887192207239","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"640205114457403334","sqlLen":38,"srcAddress":"136.86.155.150","srcGeoCity":"北京","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":3390,"srcUserName":"Schroeder8657","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9860,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"57:96:c1:08:a1:29","destPort":1467,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"85651703642858795740465269673600","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"161712375476144872","sqlLen":49,"srcAddress":"244.126.124.29","srcGeoCity":"深圳","srcMacAddress":"21:72:94:6a:bf:29","srcPort":9103,"srcUserName":"Hegmann8021","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9719,"databaseName":"gp","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"188.111.191.20","destMacAddress":"28:3e:33:06:54:76","destPort":6110,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"70199994618975183904897514064987","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"721030547956361011","sqlLen":25,"srcAddress":"96.233.148.221","srcGeoCity":"深圳","srcMacAddress":"d1:44:45:df:e5:61","srcPort":9065,"srcUserName":"Block3639","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2486,"databaseName":"Oracle","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"104.159.172.193","destMacAddress":"48:fb:32:cb:bd:95","destPort":5502,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"45142548694841012785366517213764","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"420184729935707623","sqlLen":174,"srcAddress":"16.191.137.122","srcGeoCity":"深圳","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":2060,"srcUserName":"Johnston4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4461,"databaseName":"gp","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"28.59.106.178","destMacAddress":"98:37:31:2c:f2:b3","destPort":3016,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"29530797123969910486197149518882","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"415975376393075863","sqlLen":162,"srcAddress":"44.16.120.228","srcGeoCity":"宁波","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":4040,"srcUserName":"Fisher7148","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8880,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"234.61.1.114","destMacAddress":"3a:ec:f2:ca:8d:84","destPort":1340,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"82327552800484487985131271443509","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"024848130613622370","sqlLen":95,"srcAddress":"50.87.56.91","srcGeoCity":"北京","srcMacAddress":"dd:42:45:20:02:bb","srcPort":5120,"srcUserName":"Okuneva3981","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5035,"databaseName":"MySQL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"28.59.106.178","destMacAddress":"57:96:c1:08:a1:29","destPort":5053,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"52836182898965456393182237342312","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"370586574268494799","sqlLen":89,"srcAddress":"111.251.218.110","srcGeoCity":"上海","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":311,"srcUserName":"Kuvalis2993","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7564,"databaseName":"ES","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"72:72:c8:e5:3c:73","destPort":9574,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"82747931770900141945534369943128","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"059190734001327567","sqlLen":91,"srcAddress":"140.22.119.73","srcGeoCity":"深圳","srcMacAddress":"83:07:76:1f:27:60","srcPort":3576,"srcUserName":"Dickinson2648","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8249,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":56,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"18706311919049936117652481337876","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"575268350207480028","sqlLen":80,"srcAddress":"183.127.88.151","srcGeoCity":"华盛顿","srcMacAddress":"20:f1:10:e6:a7:19","srcPort":3765,"srcUserName":"Dietrich1947","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8665,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"244.80.123.228","destMacAddress":"5b:46:cb:60:55:7f","destPort":7207,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"99927945501817561089002051327777","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"987332363400829240","sqlLen":162,"srcAddress":"105.117.143.66","srcGeoCity":"杭州","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":7949,"srcUserName":"Streich4436","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4918,"databaseName":"mssql","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"137.186.69.237","destMacAddress":"80:09:08:bd:a6:3c","destPort":6091,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"96667017791058862849417798701151","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"736609456145045315","sqlLen":121,"srcAddress":"209.129.84.194","srcGeoCity":"深圳","srcMacAddress":"e9:03:97:61:5c:f2","srcPort":8014,"srcUserName":"Rath1486","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9727,"databaseName":"DB2","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"248.62.146.42","destMacAddress":"70:70:a6:49:2e:6b","destPort":5428,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"00841791285268254971891307725740","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"372308033615594314","sqlLen":131,"srcAddress":"179.243.22.221","srcGeoCity":"深圳","srcMacAddress":"5b:c7:66:49:d6:e6","srcPort":6123,"srcUserName":"Lebsack6244","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7505,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"f6:ee:7e:37:04:e1","destPort":3261,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"84861735543262713887930872677468","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"883858659868403341","sqlLen":55,"srcAddress":"96.233.148.221","srcGeoCity":"金华","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":6713,"srcUserName":"Rutherford1935","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7352,"databaseName":"orcl","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"e6:93:cf:e6:fe:19","destPort":667,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"82626356254259449967055154866164","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"368827182996698296","sqlLen":158,"srcAddress":"60.200.186.40","srcGeoCity":"华盛顿","srcMacAddress":"5f:7f:68:a6:c8:d2","srcPort":718,"srcUserName":"Orn6863","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":27,"databaseName":"orcl","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"42.195.216.71","destMacAddress":"e6:93:cf:e6:fe:19","destPort":3063,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"96899125391855164303153208805596","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"459882227571307318","sqlLen":121,"srcAddress":"209.129.84.194","srcGeoCity":"宁波","srcMacAddress":"99:ac:f7:40:97:d0","srcPort":2454,"srcUserName":"Hartmann5397","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7844,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"85.253.54.21","destMacAddress":"57:96:c1:08:a1:29","destPort":4264,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"98917753073956787222063505735946","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"900897037893416347","sqlLen":161,"srcAddress":"199.46.135.240","srcGeoCity":"华盛顿","srcMacAddress":"d5:a4:3c:0d:76:b3","srcPort":9219,"srcUserName":"Hartmann5397","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8910,"databaseName":"ES","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":5463,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"95099648711355438074716954739904","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"506726914491206875","sqlLen":88,"srcAddress":"110.26.158.229","srcGeoCity":"宁波","srcMacAddress":"f9:30:b2:e9:1c:d6","srcPort":6794,"srcUserName":"Paucek4501","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5771,"databaseName":"Clickhouse","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"244.80.123.228","destMacAddress":"ce:91:21:b2:1a:8c","destPort":1942,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"76893969183172343975768419305421","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"158633859314579158","sqlLen":113,"srcAddress":"213.53.148.148","srcGeoCity":"杭州","srcMacAddress":"df:80:ed:e2:57:d3","srcPort":865,"srcUserName":"McGlynn9489","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":590,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"26.136.90.173","destMacAddress":"70:70:a6:49:2e:6b","destPort":5360,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"59243267930144659083320337051069","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"195163693082312071","sqlLen":96,"srcAddress":"221.218.35.8","srcGeoCity":"杭州","srcMacAddress":"83:07:76:1f:27:60","srcPort":5442,"srcUserName":"Rath1486","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9016,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"89:d7:7e:2b:81:fd","destPort":4888,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"58444452452551644238836386904458","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"871148113177330236","sqlLen":176,"srcAddress":"79.81.237.154","srcGeoCity":"金华","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":7148,"srcUserName":"Hegmann4636","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6001,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"214.59.227.99","destMacAddress":"c2:38:70:d4:bf:0c","destPort":462,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"93043633794171379023417549924275","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"147010888718153850","sqlLen":96,"srcAddress":"106.41.211.240","srcGeoCity":"杭州","srcMacAddress":"ad:a8:ba:57:52:e0","srcPort":6675,"srcUserName":"Johnston4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6103,"databaseName":"orcl","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":9261,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"100","eventId":"01820490764799075077545522437413","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"427571819355430678","sqlLen":131,"srcAddress":"239.152.242.173","srcGeoCity":"LA","srcMacAddress":"ac:50:99:9f:24:3a","srcPort":2939,"srcUserName":"Mertz1141","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3363,"databaseName":"ORCL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"25:2a:d9:16:e8:30","destPort":5245,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"12120470524791161115065562120099","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"460812843000940551","sqlLen":101,"srcAddress":"190.223.57.93","srcGeoCity":"金华","srcMacAddress":"58:51:9c:4c:56:b5","srcPort":288,"srcUserName":"Paucek4501","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":320,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":619,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"33559806516256866719853548098221","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"055123128665985229","sqlLen":49,"srcAddress":"131.64.182.163","srcGeoCity":"宁波","srcMacAddress":"c2:70:42:3a:b8:76","srcPort":7900,"srcUserName":"Gottlieb4749","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8819,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"188.111.191.20","destMacAddress":"80:09:08:bd:a6:3c","destPort":1068,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"10164659578762878323256239621957","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"532056377165373449","sqlLen":86,"srcAddress":"94.248.245.183","srcGeoCity":"杭州","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":2209,"srcUserName":"Buckridge1347","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8207,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"23:33:65:d4:8d:15","destPort":9328,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"55290517862434808009381431161131","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"108119868917630630","sqlLen":92,"srcAddress":"50.87.56.91","srcGeoCity":"上海","srcMacAddress":"83:07:76:1f:27:60","srcPort":507,"srcUserName":"Wolf5198","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2265,"databaseName":"ES","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"4f:d9:63:f7:d6:27","destPort":8509,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"00771704588790418589644643514654","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"437944501021613911","sqlLen":109,"srcAddress":"163.215.63.82","srcGeoCity":"上海","srcMacAddress":"6f:1c:68:f3:30:dc","srcPort":8764,"srcUserName":"Runolfsson2194","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1514,"databaseName":"orcl","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"23:33:65:d4:8d:15","destPort":5035,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"27556921130034672504357889283455","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"700939407810600787","sqlLen":157,"srcAddress":"140.22.119.73","srcGeoCity":"宁波","srcMacAddress":"5b:c7:66:49:d6:e6","srcPort":2121,"srcUserName":"Wuckert6564","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7297,"databaseName":"mongoDB","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"e4:95:98:6a:cb:5e","destPort":798,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"18872563456468087107166253037623","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"737478633727647245","sqlLen":161,"srcAddress":"71.103.58.168","srcGeoCity":"北京","srcMacAddress":"ee:93:0a:2b:e0:35","srcPort":9617,"srcUserName":"Wiegand1146","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5587,"databaseName":"DM7","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"23.249.79.85","destMacAddress":"e6:93:cf:e6:fe:19","destPort":919,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"28347051068871276353333743195320","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"862479462448614233","sqlLen":135,"srcAddress":"232.211.111.182","srcGeoCity":"LA","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":3383,"srcUserName":"McGlynn9489","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3199,"databaseName":"DM7","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"197.51.170.167","destMacAddress":"10:da:98:e8:d7:4a","destPort":367,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"31497399176212340248903870837786","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"019432531733925802","sqlLen":58,"srcAddress":"188.113.74.83","srcGeoCity":"上海","srcMacAddress":"21:72:94:6a:bf:29","srcPort":2052,"srcUserName":"Hagenes3819","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2270,"databaseName":"gp","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"25:2a:d9:16:e8:30","destPort":8140,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"86477810902981114323179140836605","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"238339824690346626","sqlLen":171,"srcAddress":"239.152.242.173","srcGeoCity":"金华","srcMacAddress":"dd:42:45:20:02:bb","srcPort":7098,"srcUserName":"Block3639","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1470,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"104.159.172.193","destMacAddress":"3a:ec:f2:ca:8d:84","destPort":9834,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"56129524702413664265293529746007","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"784717298782279835","sqlLen":115,"srcAddress":"44.16.120.228","srcGeoCity":"上海","srcMacAddress":"3f:fe:6a:2f:17:1b","srcPort":3407,"srcUserName":"Gutmann6256","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8581,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"206.100.68.134","destMacAddress":"8f:57:e7:01:84:b6","destPort":5925,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"93326853688673978548493858203612","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"964796000553367062","sqlLen":107,"srcAddress":"94.248.245.183","srcGeoCity":"杭州","srcMacAddress":"ba:8d:4c:25:18:1b","srcPort":354,"srcUserName":"Cassin2125","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5852,"databaseName":"Oracle","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"28.59.106.178","destMacAddress":"f6:ee:7e:37:04:e1","destPort":1684,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"62050798259480265869250934467992","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"345273301917334617","sqlLen":44,"srcAddress":"44.16.120.228","srcGeoCity":"上海","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":8772,"srcUserName":"Wiegand1146","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5762,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"f5:f3:eb:53:1d:0a","destPort":5849,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"0","eventId":"34002829426807312213842954607288","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"437693008241351295","sqlLen":82,"srcAddress":"106.41.211.240","srcGeoCity":"宁波","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":6716,"srcUserName":"Conroy1852","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7494,"databaseName":"MySQL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"234.61.1.114","destMacAddress":"e0:8d:d6:0d:1f:e8","destPort":8336,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"1","eventId":"00119314013399435163129942388397","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"077389629797155585","sqlLen":30,"srcAddress":"96.233.148.221","srcGeoCity":"宁波","srcMacAddress":"ca:87:27:64:cf:5a","srcPort":6214,"srcUserName":"Kuhn6094","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1012,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"48:fb:32:cb:bd:95","destPort":5039,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"12951059584225567066248757187535","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"554030570409722986","sqlLen":38,"srcAddress":"163.215.63.82","srcGeoCity":"北京","srcMacAddress":"ee:93:0a:2b:e0:35","srcPort":4563,"srcUserName":"Carroll2109","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9436,"databaseName":"DM7","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"15.130.46.56","destMacAddress":"72:72:c8:e5:3c:73","destPort":7050,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"14294432034231370218972130984700","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"295455458655237336","sqlLen":106,"srcAddress":"221.218.35.8","srcGeoCity":"华盛顿","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":5257,"srcUserName":"Streich5154","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9360,"databaseName":"ES","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"49:85:e7:b6:91:8c","destPort":9256,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"20388051055040402610625620823526","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"121618659664830099","sqlLen":151,"srcAddress":"136.86.155.150","srcGeoCity":"宁波","srcMacAddress":"1c:a9:41:dd:39:9b","srcPort":2586,"srcUserName":"Orn6863","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5551,"databaseName":"mssql","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"47.250.54.112","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":1550,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"75631544212118287464561932772272","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"977043411688215162","sqlLen":107,"srcAddress":"147.67.110.36","srcGeoCity":"北京","srcMacAddress":"79:84:1e:5d:af:1d","srcPort":8303,"srcUserName":"Koss2360","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8582,"databaseName":"ES","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"234.61.1.114","destMacAddress":"05:e3:88:45:02:90","destPort":8146,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"38680443304882237179236533340265","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"116790383860637756","sqlLen":164,"srcAddress":"159.146.125.159","srcGeoCity":"LA","srcMacAddress":"69:a7:06:11:98:f8","srcPort":3817,"srcUserName":"Koss2360","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2866,"databaseName":"gp","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"225.75.224.83","destMacAddress":"f5:f3:eb:53:1d:0a","destPort":7929,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"63126663349813547337904416632846","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"641589963849848222","sqlLen":57,"srcAddress":"5.136.113.251","srcGeoCity":"上海","srcMacAddress":"28:f3:02:f9:02:bb","srcPort":9192,"srcUserName":"Witting8531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8001,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"124.33.36.59","destMacAddress":"8f:57:e7:01:84:b6","destPort":9939,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"91055686693213300216532085938936","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"271811201449499449","sqlLen":70,"srcAddress":"96.233.148.221","srcGeoCity":"深圳","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":1525,"srcUserName":"Rohan3547","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5524,"databaseName":"ES","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"225.75.224.83","destMacAddress":"b5:c5:9a:c3:2c:53","destPort":4927,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"75978913298220587192231981484181","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"579845146426443588","sqlLen":40,"srcAddress":"244.126.124.29","srcGeoCity":"华盛顿","srcMacAddress":"83:d6:a9:54:e6:31","srcPort":7449,"srcUserName":"Gerhold9032","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1275,"databaseName":"mongoDB","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"39.188.39.130","destMacAddress":"89:d7:7e:2b:81:fd","destPort":1052,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"58414736990037305704966270721542","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"978145401237955690","sqlLen":73,"srcAddress":"111.251.218.110","srcGeoCity":"深圳","srcMacAddress":"f8:d0:c6:bd:41:50","srcPort":642,"srcUserName":"Kuhn6094","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7837,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"7c:cb:99:ce:cf:26","destPort":2203,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"89765799243351267064925398418143","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"164667914747606156","sqlLen":101,"srcAddress":"163.215.63.82","srcGeoCity":"上海","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":6322,"srcUserName":"Lebsack6244","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1835,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"188.111.191.20","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":5464,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"99696987933439446985397442364464","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"761478068701771422","sqlLen":136,"srcAddress":"199.46.135.240","srcGeoCity":"深圳","srcMacAddress":"f7:c5:db:87:54:e6","srcPort":8756,"srcUserName":"Batz3605","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Network","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7822,"databaseName":"DB2","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"197.51.170.167","destMacAddress":"98:37:31:2c:f2:b3","destPort":4272,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"96714467587825027930807496204883","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"283056777697173451","sqlLen":65,"srcAddress":"158.169.207.92","srcGeoCity":"宁波","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":770,"srcUserName":"Rath1486","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6466,"databaseName":"ORCL","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"45.162.114.235","destMacAddress":"92:e5:48:a6:14:70","destPort":6069,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"74992412973595082526023859140775","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"471838223625702616","sqlLen":130,"srcAddress":"190.223.57.93","srcGeoCity":"LA","srcMacAddress":"1c:a9:41:dd:39:9b","srcPort":3802,"srcUserName":"Cassin5985","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4744,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"4f:d9:63:f7:d6:27","destPort":5904,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"48056030926133409723996978714750","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"159270162248654037","sqlLen":47,"srcAddress":"96.33.76.75","srcGeoCity":"LA","srcMacAddress":"83:d6:a9:54:e6:31","srcPort":4011,"srcUserName":"Jast6113","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9471,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"ce:91:21:b2:1a:8c","destPort":3338,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"80980564551007535308433316534173","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"983012154877855074","sqlLen":125,"srcAddress":"110.26.158.229","srcGeoCity":"宁波","srcMacAddress":"ec:49:cc:3f:16:c4","srcPort":8219,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4452,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":8919,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"100","eventId":"05063017750471989583624009212632","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"288484466130002046","sqlLen":127,"srcAddress":"130.192.193.16","srcGeoCity":"杭州","srcMacAddress":"7f:a7:b8:35:31:5e","srcPort":4181,"srcUserName":"Becker5531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Network","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3556,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"5b:46:cb:60:55:7f","destPort":1025,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"56256990025602939162728562934274","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"091574871011073414","sqlLen":154,"srcAddress":"102.71.150.98","srcGeoCity":"杭州","srcMacAddress":"ad:a8:ba:57:52:e0","srcPort":3823,"srcUserName":"Rutherford1935","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4248,"databaseName":"mongoDB","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"207.5.220.50","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":5841,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"49968362917244281359561317456153","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"294855218411601609","sqlLen":57,"srcAddress":"67.110.175.201","srcGeoCity":"华盛顿","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":3093,"srcUserName":"Zemlak9497","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6141,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"d6:04:cf:00:45:1c","destPort":5884,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"35484914287754477650274356430290","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"457195366401062932","sqlLen":6,"srcAddress":"158.169.207.92","srcGeoCity":"上海","srcMacAddress":"6f:1c:68:f3:30:dc","srcPort":4698,"srcUserName":"Johnston4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4005,"databaseName":"orcl","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"e5:12:aa:12:0e:20","destPort":6893,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"64693876334398420596465448334109","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"050668056553932705","sqlLen":96,"srcAddress":"50.87.56.91","srcGeoCity":"华盛顿","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":8638,"srcUserName":"Nicolas9981","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9134,"databaseName":"pg","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"104.159.172.193","destMacAddress":"ce:91:21:b2:1a:8c","destPort":7003,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"53244857406392589748231281323680","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"784965088339333030","sqlLen":15,"srcAddress":"199.46.135.240","srcGeoCity":"杭州","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":7267,"srcUserName":"Batz3605","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9238,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"79.175.7.234","destMacAddress":"57:96:c1:08:a1:29","destPort":6585,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"32684326973625042740963818988373","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"297471134041167012","sqlLen":169,"srcAddress":"96.233.148.221","srcGeoCity":"上海","srcMacAddress":"f2:93:97:77:55:70","srcPort":5971,"srcUserName":"Farrell4514","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":78,"databaseName":"gp","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"172.152.79.147","destMacAddress":"bc:b5:36:a5:29:13","destPort":4751,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"30755385425921930194954487062520","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"489843716268511641","sqlLen":25,"srcAddress":"50.87.56.91","srcGeoCity":"深圳","srcMacAddress":"ad:a8:ba:57:52:e0","srcPort":2636,"srcUserName":"Lehner2190","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1622,"databaseName":"DB2","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"26.136.90.173","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":810,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"01857933850620119770257004923864","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"862069842287925647","sqlLen":155,"srcAddress":"232.211.111.182","srcGeoCity":"华盛顿","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":6323,"srcUserName":"Conroy1852","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8051,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"206.100.68.134","destMacAddress":"4f:d9:63:f7:d6:27","destPort":7656,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"03934920574728948586975156196002","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"239723554217615615","sqlLen":71,"srcAddress":"94.248.245.183","srcGeoCity":"上海","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":5529,"srcUserName":"Roob8151","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2380,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":4208,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"84821260377099212313864058745668","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"861215876668688012","sqlLen":74,"srcAddress":"106.41.211.240","srcGeoCity":"宁波","srcMacAddress":"d2:a8:d7:1c:3e:fb","srcPort":6874,"srcUserName":"Hartmann5397","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1107,"databaseName":"mongoDB","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"124.33.36.59","destMacAddress":"80:09:08:bd:a6:3c","destPort":4030,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"26010245176555524082023646069061","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"103788524122745578","sqlLen":35,"srcAddress":"110.26.158.229","srcGeoCity":"华盛顿","srcMacAddress":"ec:49:cc:3f:16:c4","srcPort":9316,"srcUserName":"McGlynn9489","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6599,"databaseName":"ES","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"80:09:08:bd:a6:3c","destPort":2040,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"76766469405340523352543084555044","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"336959933525395158","sqlLen":161,"srcAddress":"155.35.19.51","srcGeoCity":"杭州","srcMacAddress":"c2:22:e1:bd:47:f3","srcPort":8645,"srcUserName":"Bartell3239","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":76,"databaseName":"pg","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"85.253.54.21","destMacAddress":"28:3e:33:06:54:76","destPort":9624,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"03139857221580973796577219143196","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"324377231308883133","sqlLen":175,"srcAddress":"20.6.8.159","srcGeoCity":"LA","srcMacAddress":"a6:ec:e6:b2:e2:a7","srcPort":9344,"srcUserName":"Witting8531","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5887,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"207.5.220.50","destMacAddress":"47:a2:c4:ca:e5:ce","destPort":8668,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"70776603180129721848935245337772","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"300860432219843300","sqlLen":119,"srcAddress":"136.147.218.55","srcGeoCity":"上海","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":6811,"srcUserName":"Mohr5241","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":613,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"210.55.43.89","destMacAddress":"72:72:c8:e5:3c:73","destPort":4141,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"27491764766405317794830925185784","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"284359948188470664","sqlLen":195,"srcAddress":"131.64.182.163","srcGeoCity":"北京","srcMacAddress":"ad:a8:ba:57:52:e0","srcPort":3307,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3088,"databaseName":"MySQL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"49:85:e7:b6:91:8c","destPort":4402,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"38578095839006354835785780514594","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"973634776311142488","sqlLen":29,"srcAddress":"193.66.60.80","srcGeoCity":"宁波","srcMacAddress":"e9:03:97:61:5c:f2","srcPort":467,"srcUserName":"Macejkovic8134","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5918,"databaseName":"orcl","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"26.136.90.173","destMacAddress":"f6:ee:7e:37:04:e1","destPort":182,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"78190770784630585488182449617663","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"916918822094283665","sqlLen":46,"srcAddress":"179.243.22.221","srcGeoCity":"华盛顿","srcMacAddress":"93:b5:85:1f:cb:d7","srcPort":206,"srcUserName":"Gulgowski7239","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5655,"databaseName":"mongoDB","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"28.59.106.178","destMacAddress":"c0:d4:c9:a3:f8:aa","destPort":2654,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"37442790339913711342763922921535","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"156492238026133754","sqlLen":13,"srcAddress":"179.243.22.221","srcGeoCity":"深圳","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":108,"srcUserName":"Kuvalis2993","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1444,"databaseName":"orcl","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"10.38.164.173","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":1753,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"50608211233961198626907632021508","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"543921071138558839","sqlLen":52,"srcAddress":"131.64.182.163","srcGeoCity":"华盛顿","srcMacAddress":"25:3b:16:83:ba:53","srcPort":5064,"srcUserName":"Roob8151","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9589,"databaseName":"ORCL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"123.13.111.71","destMacAddress":"ea:0d:ac:43:c8:94","destPort":1885,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"100","eventId":"95180821061208544833049229949963","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"666390231495316124","sqlLen":65,"srcAddress":"232.211.111.182","srcGeoCity":"LA","srcMacAddress":"ca:87:27:64:cf:5a","srcPort":3093,"srcUserName":"Dietrich1947","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9502,"databaseName":"orcl","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"e4:95:98:6a:cb:5e","destPort":8873,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"60929832001125795318772699501672","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"240004152664421562","sqlLen":26,"srcAddress":"111.251.218.110","srcGeoCity":"深圳","srcMacAddress":"a6:ec:e6:b2:e2:a7","srcPort":3770,"srcUserName":"Block3639","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4791,"databaseName":"ORCL","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"26.230.251.136","destMacAddress":"72:72:c8:e5:3c:73","destPort":5668,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"25738583446006286204616404066309","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"542686313664065741","sqlLen":60,"srcAddress":"140.22.119.73","srcGeoCity":"LA","srcMacAddress":"ee:93:0a:2b:e0:35","srcPort":1868,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Network","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5746,"databaseName":"orcl","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"248.62.146.42","destMacAddress":"b5:c5:9a:c3:2c:53","destPort":558,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"50","eventId":"95722783073965057767706150350727","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"439220422679028891","sqlLen":107,"srcAddress":"232.180.188.17","srcGeoCity":"宁波","srcMacAddress":"6f:1c:68:f3:30:dc","srcPort":2722,"srcUserName":"Streich5154","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9575,"databaseName":"mongoDB","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"248.62.146.42","destMacAddress":"bc:b5:36:a5:29:13","destPort":3978,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"36494647949984733504109989096235","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"901905917193854425","sqlLen":199,"srcAddress":"183.127.88.151","srcGeoCity":"北京","srcMacAddress":"f8:d0:c6:bd:41:50","srcPort":8383,"srcUserName":"Wiegand1146","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9943,"databaseName":"mssql","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"52.175.195.98","destMacAddress":"72:72:c8:e5:3c:73","destPort":9441,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"52118761490493429784510822110724","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"656536214090892301","sqlLen":21,"srcAddress":"159.146.125.159","srcGeoCity":"上海","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":4240,"srcUserName":"Weissnat8836","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6736,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"225.75.224.83","destMacAddress":"bd:f7:89:26:75:6e","destPort":6945,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"100","eventId":"93524052682804069164737931712136","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"092605058820080615","sqlLen":152,"srcAddress":"162.146.4.133","srcGeoCity":"上海","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":2857,"srcUserName":"Hagenes3819","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7292,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"208.140.19.210","destMacAddress":"d5:64:2f:54:35:6b","destPort":5162,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"38782269263251710640860242132453","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"357556016196011944","sqlLen":181,"srcAddress":"46.86.184.134","srcGeoCity":"深圳","srcMacAddress":"c6:d8:ad:4c:43:76","srcPort":1351,"srcUserName":"Kemmer5764","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9911,"databaseName":"mongoDB","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"248.62.146.42","destMacAddress":"4f:d9:63:f7:d6:27","destPort":808,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"50","eventId":"15869549729125454971977246924833","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"812432729629090780","sqlLen":140,"srcAddress":"244.126.124.29","srcGeoCity":"深圳","srcMacAddress":"08:30:fc:9e:55:2a","srcPort":3515,"srcUserName":"Ryan7258","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7923,"databaseName":"DM7","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"88.141.80.9","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":3217,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"27350115124301029199154090346873","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"670373263917139649","sqlLen":102,"srcAddress":"136.147.218.55","srcGeoCity":"宁波","srcMacAddress":"d5:a4:3c:0d:76:b3","srcPort":2163,"srcUserName":"Streich4436","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Network","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6266,"databaseName":"pg","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"113.176.40.38","destMacAddress":"ca:48:ab:60:47:41","destPort":8850,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"79943670535532380908757413430381","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"521240120023124764","sqlLen":79,"srcAddress":"190.223.57.93","srcGeoCity":"宁波","srcMacAddress":"3f:fe:6a:2f:17:1b","srcPort":1671,"srcUserName":"Deckow4431","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3314,"databaseName":"Oracle","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"b5:c5:9a:c3:2c:53","destPort":7017,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"19691899638853750701576969319924","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"102850683153233438","sqlLen":27,"srcAddress":"162.146.4.133","srcGeoCity":"北京","srcMacAddress":"df:80:ed:e2:57:d3","srcPort":2376,"srcUserName":"Tillman1636","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7724,"databaseName":"mongoDB","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"123.13.111.71","destMacAddress":"c9:74:ad:3d:ef:b3","destPort":1916,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"1","eventId":"42344838065343637807037495065811","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"524920095696364151","sqlLen":118,"srcAddress":"131.64.182.163","srcGeoCity":"华盛顿","srcMacAddress":"83:d6:a9:54:e6:31","srcPort":6333,"srcUserName":"Damore2102","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2237,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"23.249.79.85","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":5897,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"87983226381183476563093252650951","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"048596003468163325","sqlLen":91,"srcAddress":"188.113.74.83","srcGeoCity":"北京","srcMacAddress":"79:84:1e:5d:af:1d","srcPort":2516,"srcUserName":"Wolf5198","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9866,"databaseName":"DB2","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"80:09:08:bd:a6:3c","destPort":2990,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"53682215787532825586401019304241","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"270442262682423651","sqlLen":17,"srcAddress":"79.81.237.154","srcGeoCity":"宁波","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":5249,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1365,"databaseName":"gp","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"206.100.68.134","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":6453,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"50","eventId":"34306260253953116760402296522107","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"426459019607223020","sqlLen":185,"srcAddress":"199.46.135.240","srcGeoCity":"宁波","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":3640,"srcUserName":"Ortiz1135","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Network","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3751,"databaseName":"mongoDB","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"152.52.212.86","destMacAddress":"c2:38:70:d4:bf:0c","destPort":1234,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"68800510793756178351898025709254","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"451305952374426929","sqlLen":142,"srcAddress":"147.67.110.36","srcGeoCity":"杭州","srcMacAddress":"d1:44:45:df:e5:61","srcPort":8795,"srcUserName":"Larson4481","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2987,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"225.75.224.83","destMacAddress":"ce:91:21:b2:1a:8c","destPort":6272,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"62083137959422693187731270803467","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"232833640967695308","sqlLen":35,"srcAddress":"44.16.120.228","srcGeoCity":"金华","srcMacAddress":"dd:42:45:20:02:bb","srcPort":8970,"srcUserName":"Larson4481","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1974,"databaseName":"DM7","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"188.111.191.20","destMacAddress":"23:33:65:d4:8d:15","destPort":664,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"48385572437798715530451107047854","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"212987326857171752","sqlLen":185,"srcAddress":"240.191.226.235","srcGeoCity":"深圳","srcMacAddress":"1c:a9:41:dd:39:9b","srcPort":9206,"srcUserName":"Beahan4953","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Informational","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":463,"databaseName":"Clickhouse","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"e0:8d:d6:0d:1f:e8","destPort":8402,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"37805377761096982372282538253704","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"435998587333581866","sqlLen":134,"srcAddress":"20.6.8.159","srcGeoCity":"深圳","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":890,"srcUserName":"Towne6315","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3041,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"64.101.19.37","destMacAddress":"6a:c1:9b:81:7a:10","destPort":7340,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"0","eventId":"84695840707947103629804748993008","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"767274445937281896","sqlLen":62,"srcAddress":"163.215.63.82","srcGeoCity":"杭州","srcMacAddress":"79:84:1e:5d:af:1d","srcPort":4345,"srcUserName":"Zemlak4589","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host","catOutcome":"OK","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1750,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"208.140.19.210","destMacAddress":"e4:95:98:6a:cb:5e","destPort":1194,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"100","eventId":"92351070367112644151442673763091","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"416348249395832022","sqlLen":7,"srcAddress":"130.192.193.16","srcGeoCity":"深圳","srcMacAddress":"3f:fe:6a:2f:17:1b","srcPort":8640,"srcUserName":"Rohan3547","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1638,"databaseName":"DB2","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"af:27:11:81:d1:7c","destPort":3064,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"50","eventId":"90658437495057202993150939197154","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"808461783823554927","sqlLen":94,"srcAddress":"96.33.76.75","srcGeoCity":"LA","srcMacAddress":"ee:0f:9b:26:c1:b7","srcPort":8393,"srcUserName":"Mertz1141","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9213,"databaseName":"DM7","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"194.68.72.250","destMacAddress":"7c:cb:99:ce:cf:26","destPort":7027,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"89714156147702151475698562013138","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"178006210155016213","sqlLen":148,"srcAddress":"221.218.35.8","srcGeoCity":"宁波","srcMacAddress":"2c:ea:04:b2:50:17","srcPort":4629,"srcUserName":"Dickinson2648","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Vector","catOutcome":"FAIL","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6154,"databaseName":"MySQL","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"244.80.123.228","destMacAddress":"80:09:08:bd:a6:3c","destPort":2067,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"0","eventId":"67740792090932112793037899199520","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"084525487651237666","sqlLen":195,"srcAddress":"110.26.158.229","srcGeoCity":"上海","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":7531,"srcUserName":"Sawayn4170","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":4853,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"231.63.85.254","destMacAddress":"10:da:98:e8:d7:4a","destPort":5139,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"05530658149387669478992106104114","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"653698533292479559","sqlLen":173,"srcAddress":"155.35.19.51","srcGeoCity":"杭州","srcMacAddress":"a2:64:23:1a:5f:1c","srcPort":997,"srcUserName":"Kuvalis2993","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7404,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"15.130.46.56","destMacAddress":"57:96:c1:08:a1:29","destPort":6552,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"1","eventId":"00756538641677293915308733888870","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"081225026814664639","sqlLen":0,"srcAddress":"96.33.76.75","srcGeoCity":"宁波","srcMacAddress":"5b:c7:66:49:d6:e6","srcPort":9399,"srcUserName":"Hartmann3192","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":683,"databaseName":"MySQL","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"8.5.71.232","destMacAddress":"e4:95:98:6a:cb:5e","destPort":704,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"0","eventId":"47983133558931658807857294628633","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"170935017872706654","sqlLen":141,"srcAddress":"147.67.110.36","srcGeoCity":"LA","srcMacAddress":"f6:d3:c0:b7:7d:3b","srcPort":7334,"srcUserName":"McGlynn6158","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9119,"databaseName":"ES","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"23.249.79.85","destMacAddress":"70:70:a6:49:2e:6b","destPort":6713,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"0","eventId":"11813938186773005394356079774183","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"257885221106047433","sqlLen":64,"srcAddress":"45.145.165.225","srcGeoCity":"LA","srcMacAddress":"83:07:76:1f:27:60","srcPort":1110,"srcUserName":"Hagenes3819","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Host/Application/Database","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7749,"databaseName":"orcl","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"199.143.230.203","destMacAddress":"cb:4f:c8:0e:a3:99","destPort":6143,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"DELETE","effectRow":"100","eventId":"05307682129054289297421107906593","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"405437827937696780","sqlLen":96,"srcAddress":"110.26.158.229","srcGeoCity":"北京","srcMacAddress":"1c:a9:41:dd:39:9b","srcPort":8984,"srcUserName":"Gutmann6256","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2589,"databaseName":"ORCL","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"248.121.119.231","destMacAddress":"98:37:31:2c:f2:b3","destPort":4157,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"0","eventId":"60850466608405344023864450157905","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"149312027354047445","sqlLen":48,"srcAddress":"102.71.150.98","srcGeoCity":"LA","srcMacAddress":"83:d6:a9:54:e6:31","srcPort":4832,"srcUserName":"Conroy1852","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Vector","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9750,"databaseName":"mongoDB","databaseType":"POSTGRESQL","dbappWafAlertLog":"null","destAddress":"43.31.23.63","destMacAddress":"57:96:c1:08:a1:29","destPort":8906,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"10985047666957082093344762760810","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"870885052001835988","sqlLen":153,"srcAddress":"103.49.145.139","srcGeoCity":"北京","srcMacAddress":"c2:70:42:3a:b8:76","srcPort":1156,"srcUserName":"Goodwin1517","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2609,"databaseName":"pg","databaseType":"MONGODB","dbappWafAlertLog":"null","destAddress":"3.43.243.52","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":402,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"04831517569057294831164363191560","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"923969848385045226","sqlLen":84,"srcAddress":"227.157.220.96","srcGeoCity":"LA","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":507,"srcUserName":"Zemlak9497","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Recon","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3472,"databaseName":"Clickhouse","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"e0:8d:d6:0d:1f:e8","destPort":2185,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"61499250686112250987466236451054","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"305968543959937610","sqlLen":148,"srcAddress":"16.191.137.122","srcGeoCity":"华盛顿","srcMacAddress":"21:72:94:6a:bf:29","srcPort":1537,"srcUserName":"Gutmann6256","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"ftp","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6643,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"79.151.39.186","destMacAddress":"05:e3:88:45:02:90","destPort":8995,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"70108783916765424483009977717711","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"638998048515855073","sqlLen":128,"srcAddress":"147.67.110.36","srcGeoCity":"LA","srcMacAddress":"69:a7:06:11:98:f8","srcPort":6713,"srcUserName":"Rath1486","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6994,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"d5:64:2f:54:35:6b","destPort":3033,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"76427102347734876321343627111478","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"852806153603810762","sqlLen":93,"srcAddress":"136.86.155.150","srcGeoCity":"华盛顿","srcMacAddress":"69:a7:06:11:98:f8","srcPort":9744,"srcUserName":"Towne6315","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Check","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Recon","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":7994,"databaseName":"ES","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"124.33.36.59","destMacAddress":"9b:6e:f2:68:f8:c1","destPort":9232,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"1","eventId":"63013607101283400723042632982687","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"491161989842972785","sqlLen":21,"srcAddress":"71.103.58.168","srcGeoCity":"宁波","srcMacAddress":"2b:0c:69:2f:bd:2c","srcPort":9680,"srcUserName":"Mohr5241","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"https","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Vector","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5673,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"113.176.40.38","destMacAddress":"af:27:11:81:d1:7c","destPort":9819,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"66908782022397488493066483094564","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"607902807112362158","sqlLen":83,"srcAddress":"60.200.186.40","srcGeoCity":"杭州","srcMacAddress":"a6:ec:e6:b2:e2:a7","srcPort":3452,"srcUserName":"Macejkovic4396","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":8945,"databaseName":"Clickhouse","databaseType":"DM","dbappWafAlertLog":"null","destAddress":"9.16.183.234","destMacAddress":"fb:a4:ee:63:77:63","destPort":5351,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"1","eventId":"17190880544624595787472417538096","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"217870494835233452","sqlLen":199,"srcAddress":"106.41.211.240","srcGeoCity":"深圳","srcMacAddress":"f7:c5:db:87:54:e6","srcPort":5727,"srcUserName":"Gottlieb4749","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Suspicious","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":2324,"databaseName":"Clickhouse","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"150.44.233.197","destMacAddress":"80:09:08:bd:a6:3c","destPort":9352,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"SELECT","effectRow":"50","eventId":"23440183891487413413748052397885","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"100816726197138265","sqlLen":29,"srcAddress":"190.223.57.93","srcGeoCity":"宁波","srcMacAddress":"f7:c5:db:87:54:e6","srcPort":8715,"srcUserName":"Donnelly6051","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/UNKNOW","catOutcome":"Attempt","catSignificance":"/Informational","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":1066,"databaseName":"ORCL","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"79.175.7.234","destMacAddress":"90:f5:42:d7:5f:ca","destPort":4682,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"55695407148262702104182856379514","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"322113760393709684","sqlLen":156,"srcAddress":"155.35.19.51","srcGeoCity":"上海","srcMacAddress":"f0:5c:6b:dd:fc:ee","srcPort":3809,"srcUserName":"Hagenes3819","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"unknow","bytesIn":"100","bytesOut":"100","catBehavior":"/Modify","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5179,"databaseName":"ES","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"206.100.68.134","destMacAddress":"10:da:98:e8:d7:4a","destPort":6673,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"50","eventId":"53204827442564830281147995396570","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"944481737498206809","sqlLen":34,"srcAddress":"50.87.56.91","srcGeoCity":"杭州","srcMacAddress":"a9:53:cb:63:8f:d7","srcPort":4396,"srcUserName":"Deckow4431","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/UNKNOW","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":9353,"databaseName":"DB2","databaseType":"ORACLE","dbappWafAlertLog":"null","destAddress":"252.188.148.233","destMacAddress":"89:d7:7e:2b:81:fd","destPort":7717,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"DBAudit","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"DELETE","effectRow":"1","eventId":"82991938983779401709110692980162","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"639041024402553318","sqlLen":41,"srcAddress":"155.35.19.51","srcGeoCity":"杭州","srcMacAddress":"93:b5:85:1f:cb:d7","srcPort":3684,"srcUserName":"Carroll2109","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Delete","catObject":"/Host/OperatingSystem","catOutcome":"FAIL","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5790,"databaseName":"gp","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"34.217.7.133","destMacAddress":"ce:04:75:1b:fc:dd","destPort":6858,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"0","eventId":"29006597292946066176242191280315","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"859833417304074723","sqlLen":130,"srcAddress":"199.46.135.240","srcGeoCity":"LA","srcMacAddress":"c2:70:42:3a:b8:76","srcPort":504,"srcUserName":"Conroy1852","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"web","bytesIn":"100","bytesOut":"100","catBehavior":"/Authorization","catObject":"/Host","catOutcome":"FAIL","catSignificance":"/Compromise","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":3226,"databaseName":"Oracle","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"34.217.7.133","destMacAddress":"10:da:98:e8:d7:4a","destPort":8432,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"50","eventId":"11399296876420985018304626708945","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"512775781925235717","sqlLen":94,"srcAddress":"164.214.139.64","srcGeoCity":"深圳","srcMacAddress":"93:b5:85:1f:cb:d7","srcPort":7951,"srcUserName":"Wuckert6564","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"snmp","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/Compromise","catTechnique":"/UNKNOW","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5529,"databaseName":"MySQL","databaseType":"SQLSERVER","dbappWafAlertLog":"null","destAddress":"231.82.78.253","destMacAddress":"45:a6:e6:c1:4e:78","destPort":42,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"DELETE","effectRow":"1","eventId":"96123187984568086998305042482433","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"220539313340519521","sqlLen":9,"srcAddress":"136.147.218.55","srcGeoCity":"金华","srcMacAddress":"f7:c5:db:87:54:e6","srcPort":1047,"srcUserName":"Ondricka3810","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"telnet","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/Application/Database","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5662,"databaseName":"Oracle","databaseType":"DB2","dbappWafAlertLog":"null","destAddress":"93.153.159.202","destMacAddress":"4f:d9:63:f7:d6:27","destPort":9598,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"10","dvcAction":"DELETE","effectRow":"100","eventId":"86856080517179089795421087678676","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"751947120508367625","sqlLen":19,"srcAddress":"5.136.113.251","srcGeoCity":"深圳","srcMacAddress":"83:07:76:1f:27:60","srcPort":950,"srcUserName":"Fadel5600","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"imap","bytesIn":"100","bytesOut":"100","catBehavior":"/Execute","catObject":"/Host","catOutcome":"OK","catSignificance":"/Suspicious","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":5533,"databaseName":"pg","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"39.188.39.130","destMacAddress":"80:09:08:bd:a6:3c","destPort":492,"deviceAssetType":"fileMd5","deviceCat":"/VPN","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"AiNTA","deviceSendProductVersion":"v4.0.61","direction":"11","dvcAction":"SELECT","effectRow":"50","eventId":"87472410344736117846405154742014","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"402543816468679388","sqlLen":40,"srcAddress":"188.113.74.83","srcGeoCity":"深圳","srcMacAddress":"28:f3:02:f9:02:bb","srcPort":81,"srcUserName":"Kemmer5764","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"smtp","bytesIn":"100","bytesOut":"100","catBehavior":"/Found","catObject":"/Network","catOutcome":"OK","catSignificance":"/UNKNOW","catTechnique":"/TrafficAnomaly","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":6079,"databaseName":"gp","databaseType":"MYSQL","dbappWafAlertLog":"null","destAddress":"173.5.153.239","destMacAddress":"f5:f3:eb:53:1d:0a","destPort":8191,"deviceAssetType":"fileMd5","deviceCat":"/Audit/Database","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"00","dvcAction":"SELECT","effectRow":"0","eventId":"46931753493397903245165278209891","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"405684013811302529","sqlLen":31,"srcAddress":"105.117.143.66","srcGeoCity":"宁波","srcMacAddress":"8a:79:25:6b:5e:aa","srcPort":9691,"srcUserName":"Lebsack6244","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}
{"DPIAlertType":"passwd","appProtocol":"http","bytesIn":"100","bytesOut":"100","catBehavior":"/Create","catObject":"/Host/OperatingSystem","catOutcome":"Attempt","catSignificance":"/UNKNOW","catTechnique":"/BruteForce","clientPrg":"C","collectorReceiptTime":"2021-07-08 15:55:42","costTime":489,"databaseName":"DM7","databaseType":"UNKNOWN","dbappWafAlertLog":"null","destAddress":"23.249.79.85","destMacAddress":"c2:38:70:d4:bf:0c","destPort":6155,"deviceAssetType":"fileMd5","deviceCat":"/IDS/Host","deviceReceiptTime":"2021-07-08 15:55:42","deviceSendProductName":"windows_eventLog","deviceSendProductVersion":"v4.0.61","direction":"01","dvcAction":"SELECT","effectRow":"1","eventId":"71897316787723378234630447904712","logType":"audit","name":"sql操作日志","payload":"SELECT (CASE WHEN (EXISTS(SELECT resultid FROM SCOTT.TESTDATA)) THEN 1 ELSE 0 END) FROM DUAL","productVendorName":"安恒","severity":"2","sqlId":"417913965532705372","sqlLen":99,"srcAddress":"44.16.120.228","srcGeoCity":"华盛顿","srcMacAddress":"dd:42:45:20:02:bb","srcPort":821,"srcUserName":"Mertz1141","startTime":"2021-07-08 15:55:42","tenant":"local","vulnerability":"webAccess"}