As soon as I started talking about George Tenet, a bunch of Virginia IP addresses started trying a massive number of drop table injections against my site. (thewebofslime)

submitted ago by thewebofslime

A lot of the usual drop table commands and whatnot as well as things like looking for cross application server settings which I do not have.

How do you think they would feel if I used their list of injections on them?

SearchVoatBot ago

This submission was linked from this v/ProtectVoat comment by @SandHog.

Posted automatically (#44049) by the SearchVoat.co Cross-Link Bot. You can suppress these notifications by appending a forward-slash(/) to your Voat link. More information here.

thewebofslime ago

CACI

"Ever Vigilant"

http://www.caci.com/

4.4 Billion Revenue

Since 1962

Sterling, VA

Transformation for Defense Intelligence

Verizon

MCI Communications

odin_thor_frey ago

Can you please post the IP addresses so we can blacklist them?

thewebofslime ago

When you say "we", who do you mean?

Here is a snippet from the log. Tell me exactly what you want. I just want to be smart about handing over what I have to help you, but I also have a good case, here, that ties specific Voat users to this activity which I can use in a lawsuit and, if they are covering up for organized crime, I can report them for RICO to the federal authorities.

[Wed Mar 27 17:31:14.865020 2019] [:error] [pid -] [client 100.7.8.13:58437] [client 100.7.8.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^\\(\\) {" at REQUEST_HEADERS:Referer. [] [] ["] [CVE-2014-6271 - Bash Attack] [hostname "webofslime.com"] [uri "/"] [unique_id "XJwV0tzfyIaIPx1rvxtZXgAAAAs"], referer: () { :; }; printf 'Content-Type: text/json\r\n\r\n%s vulnerable %s' 'VEGA123' 'VEGA123'

@think-

odin_thor_frey ago

Those of us with firewalls

thewebofslime ago

I can do that. When I get off work I will, generate a proper list.