[BlueOnyx:27405] Re: BlueOnyx SVN/Trac issues

[Taco Scargo]

Hi Michael,

Is it an up-to-date version? Maybe they are trying to exploit a vulnerability.
If you are able to infect a source (or repo) a hacker will get access to a lot of hosts obviously.

Taco

> On 7 Jan 2025, at 05:30, Michael Stauber via Blueonyx <blueonyx at mail.blueonyx.it> wrote:
> 
> Hi all,
> 
>> If someone looks for some new IP address ranges to block? This is what I got so far, but the list will sure grow the more I dig through the logs
> 
> 119.8.96.0/19       # Huawei Cloud
> 110.238.104.0/21    # HUAWEI INTERNATIONAL PTE
> 111.119.208.0/20    # Huawei-Cloud-SG
> 124.243.160.0/19    # Huawei-Cloud-SG
> 166.108.192.0/19    # Huawei-Cloud-SG
> 159.138.0.0/18      # Huawei-HK-CLOUDS
> 189.1.224.0/19      # Huawei-Cloud-HK
> 49.0.240.0/20       # Huawei-Cloud-Hongkong
> 166.108.224.0/19    # Huawei-Cloud-SG
> 121.91.168.0/22     # Huawei-Cloud-HK
> 111.119.224.0/20    # Huawei-Cloud-SG
> 111.119.192.0/20    # Huawei-Cloud-SG
> 27.106.96.0/20      # Huawei-Cloud-HK
> 122.8.184.0/22      # Huawei-Cloud-Mexico
> 119.8.24.0/21       # Huawei-HK-Cloud
> 101.44.16.0/20      # Huawei-Cloud-MX
> 101.44.176.0/20     # Huawei-Cloud-MX
> 101.44.64.0/20      # Huawei-Cloud-HK
> 182.160.0.0/20      # Huawei-Cloud-Hongkong
> 119.8.33.0/24       # Huawei-HK-CLOUDS
> 190.92.210.0/24     # Huawei-Cloud-Singapore
> 124.243.128.0/18    # Huawei-Cloud-SG
> 189.1.208.0/20      # Huawei-Cloud-HK
> 119.8.32.0/19       # Huawei-HK-CLOUDS
> 27.106.112.0/20     # Huawei-Cloud-HK
> 119.13.96.0/20      # Huawei-Cloud-Singapore
> 
> The BlueOnyx SVN now has these 133,632 IP addresses blocked. But from the looks of it? There's still more to come.
> 
> I really don't get it why the heck they're harvesting the web frontend of our SVN. \o/
> 
> -- 
> With best regards
> 
> Michael Stauber
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx