• garygary posted an update 6 months, 1 week ago

    I got an alert recently from my websites firewall of an “Increased Attack Rate” from hackers trying to do MYSQL injections. Low and behold the logs say the attacks come from Russia.

    For example:

    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL,NULL#
    March 19, 2018 1:50am 185.153.198.252 (Russian Federation) Blocked for SQL Injection in query string: add_to_wishlist=15797′ UNION ALL SELECT NULL#

    Obviously my site is insignificant and is just being targeted at random by a bot but this shows that Russia is on an attack spree. Is Russia trying to get everyone to hate them or something?

    • Just two Hints:

      -If an attack comes from USA, is it the united states attacking you or a US citizen?
      -Things can be routed to appear to be originating from russia, when its your neighbors son attacking you.

      Cheers & Good luck with defense!