• Resolved cecofuli

    (@cecofuli)


    Hello,

    today I’ve received this message from Wordfence:

    The Wordfence Web Application Firewall has blocked 101 attacks over the last 10 minutes. Below is a sample of these recent attacks:

    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%'' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%'' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%'' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL#
    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%'' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL#
    Gennaio 20, 2019 10:29pm  176.121.14.189 (Ukraine)     Blocked for SQL Injection in query string: page=xxx_yyy_zzz%'' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL#

    ——————————

    Do I must to be worried????
    I’m sorry, but I’m very newbie…

    Thank you so much!

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hi @cecofuli,

    It looks like someone from the Ukraine attempted to perform an SQL attack on your site.
    No need to worry, because the attempt was detected and blocked by Wordfence.

    If you would like, you can choose to permanently block this IP from accessing your website:

    1. Go to Wordfence -> Firewall -> Blocking
    2. Create a rule with Block Type -> IP Address
    3. Put 176.121.14.189 for the IP address to block
    4. Type a custom block reason, such as attempted to SQL inject
    5. Click Block This IP Address

    Dave

    Thread Starter cecofuli

    (@cecofuli)

    Hi Dave,

    thank you =) I did what you suggested me.

    Thanks Dave,

    I had a similar occurrence with 149.202.133.181 (France) and did the same.

    Sander

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Mail: Blocked for SQL Injection in query string! HELP!’ is closed to new replies.