As soon as I started talking about George Tenet, a bunch of Virginia IP addresses started trying a massive number of drop table injections against my site.

As soon as I started talking about George Tenet, a bunch of Virginia IP addresses started trying a massive number of drop table injections against my site. (thewebofslime)

submitted 5.7 years ago by thewebofslime

6 comments

SearchVoatBot 5.5 years ago

This submission was linked from this v/ProtectVoat comment by @SandHog.

^{Posted automatically (#44049) by the SearchVoat.co Cross-Link Bot. You can suppress these notifications by appending a forward-slash(/) to your Voat link. More information here.}

link

thewebofslime 5.7 years ago

CACI

"Ever Vigilant"

http://www.caci.com/

4.4 Billion Revenue

Since 1962

Sterling, VA

Transformation for Defense Intelligence

Verizon

MCI Communications

link

odin_thor_frey 5.7 years ago

Can you please post the IP addresses so we can blacklist them?

link

thewebofslime 5.7 years ago

When you say "we", who do you mean?

Here is a snippet from the log. Tell me exactly what you want. I just want to be smart about handing over what I have to help you, but I also have a good case, here, that ties specific Voat users to this activity which I can use in a lawsuit and, if they are covering up for organized crime, I can report them for RICO to the federal authorities.

[Wed Mar 27 17:31:14.865020 2019] [:error] [pid -] [client 100.7.8.13:58437] [client 100.7.8.13] ModSecurity: Access denied with code 418 (phase 1). Pattern match "^\\(\\) {" at REQUEST_HEADERS:Referer. [] [] ["] [CVE-2014-6271 - Bash Attack] [hostname "webofslime.com"] [uri "/"] [unique_id "XJwV0tzfyIaIPx1rvxtZXgAAAAs"], referer: () { :; }; printf 'Content-Type: text/json\r\n\r\n%s vulnerable %s' 'VEGA123' 'VEGA123'

@think-

link

odin_thor_frey 5.7 years ago

Those of us with firewalls

link

thewebofslime 5.7 years ago

I can do that. When I get off work I will, generate a proper list.

link