SQL-injection
Formular-Daten
===============================================
Name: Sergey Pavlov
E-Mail: sergey.pavlov@severstal.com
Sprache: en
Datenweitergabe: BEWILLIGT
===============================================
Abuse-Daten
===============================================
Quelle: 136.243.50.164
Kategorie: Attacken
Beschreibung:
————————————
Good day.
We have detected suspicious activity and many SQL-injections from ip 136.243.50.164 on our servers. Please, block this ip-address.
————————————
Log(-auszge):
————————————
Example:
Apr 19 19:14:49 tmgwprod access_log [19/Apr/2021:19:14:39 +0300] 136.243.50.164 — «GET /sap/bc/ui5_ui5/sap/ztmse016_coll_p/index.html?sap-client=400&sap-language=RU&sap-ui-language=select(0)from(select(sleep(15)))v)/*’%2B(select(0)from(select(sleep(15)))v)%2B'»%2B(select(0)from(select(sleep(15)))v)%2B»*/ HTTP/1.1» 500 9434 3ms tm.severstal.com TMG tmgwprod_TMG_00
————————————
===============================================
