https://foundation.aninix.net/assets/img/AniNIX.png https://foundation.aninix.net/assets/img/AniNIX.png 2022-09-26T02:16:20Z AniNIX https://aninix.net/ 2024-06-27T17:25:00Z https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#84.239.54.49 DarkFeather

A Romanian IP, 84.239.54.49, was detected pushing a variety of web application attacks and network trojan attempts against our web front. These were primarily Suricata/Snort signature 1:2016982:5 auto_prepend_file PHP config option in uri. We have no evidence that these attacks were successful. Total malicious attempts captured was 54.

2024-03-11T07:52:00Z https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#ACEVILLEPTELTD DarkFeather

Provider "ACEVILLE PTELTD" from blocks 43.156.0.0/16, 43.134.0.0/15, 43.134.0.0/17 was detected trying to bruteforce our network with a distributed attack network. We are blocking these networks for malicious attempts in the hundreds.

2023-11-17T03:30:00Z https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#24.144.93.118 DarkFeather

24.144.93.118/32 was detected using a network scanner against our external address. Total volume was 55 -- this action repeated on 2023-11-18 at 08:40Z.

2023-01-16T21:44:08Z https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#46.101.38.229

46.101.38.229/32 was detected using a variety of attacks against our 80/tcp/http listener for AniNIX/WebServer. Suricata detection rules classified the incoming threats as a variety of SSH attacks -- total volume was 48.

2023-01-16T21:44:07Z https://aninix.net/AniNIX/Wiki/raw/branch/main/rss/osint.xml#5.181.86.78

5.181.86.78/32 was detected using a variety of attacks against our 80/tcp/http listener for AniNIX/WebServer. Suricata detection rules classified the incoming threats as a variety of SQL injection methods and cross-site scripting. Total attack volume was 184.