From e3fe99556a44f0056776886cbc316771ce5742ed Mon Sep 17 00:00:00 2001
From: DarkFeather <ircs://aninix.net:6697/DarkFeather>
Date: Thu, 27 Jun 2024 12:38:23 -0500
Subject: [PATCH] 84.239.54.49 detection

---
 rss/osint.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/rss/osint.xml b/rss/osint.xml
index f6b2082..2cc4967 100644
--- a/rss/osint.xml
+++ b/rss/osint.xml
@@ -11,6 +11,17 @@
 
     <id>https://aninix.net/</id>
 
+    <entry>
+        <title>84.239.54.49</title>
+        <link href="https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#84.239.54.49"></link>
+        <updated>2024-06-27T17:25:00Z</updated>
+        <id>https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#84.239.54.49</id>
+        <author>DarkFeather</author>
+        <summary>
+            A Romanian IP, 84.239.54.49, was detected pushing a variety of web application attacks and network trojan attempts against our web front. These were primarily Suricata/Snort signature 1:2016982:5 auto_prepend_file PHP config option in uri. We have no evidence that these attacks were successful. Total malicious attempts captured was 54.
+        </summary>
+    </entry>
+
     <entry>
         <title>2024MAR11 ACEVILLE PTELTD, Singapore</title>
         <link href="https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#ACEVILLEPTELTD"></link>