You have commented 339 times on Rantburg.

Your Name
Your e-mail (optional)
Website (optional)
My Original Nic        Pic-a-Nic        Sorry. Comments have been closed on this article.
Bold Italic Underline Strike Bullet Blockquote Small Big Link Squish Foto Photo
Submit your comments on this article
--Tech & Moderator Notes
Mild injection attack attempt
2023-02-21
Last evening Rantburg.com under went what an only be called a rather inept DDOS and SQL injection/spamming attack:

The statistics:

The spamming attacks came from 21 unique IPs, from 11 unique netblocks. Most of the IPs were from European and Dutch netblocks. None of the messages were from residential netblocks, as far as can be detected.

The main concern is SQL injection attacks, and those really only affect the backup server. Fred's coding catches it and stuffs the data somewhere in a DB table until it can be examined. Dunno if it's by design or not, but it worked well that last time we had an attack.

It appears the backup server was not affected, since the normal database repopulation took place without any apparent problem.

The most interesting aspect of the attack was from this:

org-name: CIA TRIAD SECURITY LLC
org-type: OTHER
address: 2701 Centerville Road
address: New Castle County
address: Wilmington
address: Delaware 19808

Now, we all know the government would never do something as unseemly as participating in such an attack. If they wanted rantburg.com shut down, they'd just create a ticket, and the server is gone.

This is an indication of at least part of the participating servers.

Affected netblocks:

45.154.98.0/24
185.56.83.0/24
192.42.116.0/22
185.243.218.0/24
23.128.248.0/24
23.152.225.2/24
23.154.177.0/24
146.70.146.0/24
23.184.48.0/24
88.208.192.0/18
146.70.146.0/24

Posted by:badanov

#12  Riot tourism, jihad tourism... For those who enjoy causing trouble, and can’t find enough to get into at home.
Posted by: trailing wife   2023-02-21 22:11  

#11  Riot tourism is a thing.
Posted by: M. Murcek   2023-02-21 09:49  

#10  Translation:

Solidarity campaign to fund an activist's legal costs. He is accused of having committed various crimes in August 2013 during an NPD rally as part of the racist mobilization in Berlin Hellersdorf.

Right at the beginning of the verdict of the first hearing, the judge depoliticized what was happening by describing the activist as a "riot tourist" who was neither concerned with a demonstration against neo-Nazis nor with the rights of refugees.

The term "riot tourism" is an attempt to depoliticize and criminalize left-wing activism. It is used in court processes and the media to devalue left-wing politics and the associated protest actions and to decouple them from their content.
Posted by: badanov   2023-02-21 09:37  

#9  Mad eye, I found this, but am unable to translate:

Start der Solikampagne „What the f*ck is Krawalltourismus“?
von: Krawalltouristische Aktion am: 27.10.2015 - 18:17
Solikampagne für die Finanzierung der Verfahrenskosten eines Aktivisten. Diesem wird vorgeworfen, im August 2013 während einer NPD-Kundgebung im Rahmen der rassistischen Mobilmachungen in Berlin Hellersdorf verschiedene Straftaten begangen zu haben. Gleich zu Beginn der Urteilsverkündung der ersten Verhandlung entpolitisierte die Richterin die Geschehnisse, indem sie den Aktivisten als „Krawalltouristen“ bezeichnete, dem es weder um eine Demonstration gegen Neonazis, noch um die Rechte von Geflüchteten gegangen sei.
Der Begriff „Krawalltourismus“ ist der Versuch linken Aktivismus zu entpolitisieren und zu kriminalisieren. Er wird in Gerichtsprozessen und Medien eingesetzt, um linke Politik und die damit einhergehenden Protestaktionen abzuwerten und sie von ihren Inhalten zu entkoppeln.
Posted by: Slavising Unineting5672   2023-02-21 08:53  

#8  #4 all registered to vote from the same location too?
Posted by: Procopius2k   2023-02-21 08:11  

#7  Hmmm, maybe why an article I tried to post didn't make it?
Posted by: DooDahMan   2023-02-21 06:44  

#6  You might should gather forensic data on recent Rantburg haters such as ACA JOE, etc..
Posted by: Mad Eye Omeretch7959   2023-02-21 03:10  

#5  A suite of internet privacy-enabling tools is at the center of a storm brewing in Germany over a controversial law enforcement investigation that’s already netted police mountains of personal and financial information on several different anti-censorship groups. These pro-online-anonymity, nonprofit organizations are now criticizing German police who, for their part, have mostly stayed silent on the operations.

On June 20, German police raided homes and offices for the group Zwiebelfreunde (translated as Onion Friends), an organization affiliated with the Torservers.net group which runs servers for the Tor anonymity network, German media reported. The raid came after the blog Krawalltouristen (translated as Riot Tourists) called for protests against right-wing German politicians. Police have been looking for the authors of this specific blog because they reportedly feared the protests could turn violent.

Police seized a trove of electronics and documents. But members of Zwiebelfreunde say they have no connection to the activist blog.

The reasoning for why police raided Zwiebelfreunde, even though the apparent target was Krawalltouristen, is unclear. The authorities remain silent, but the main links are that Zwiebelfreunde handles European donations for the privacy-minded email service RiseUp, which is also used by Krawalltouristen. It’s a link that’s been described as “tenuous” and “terrible” by critics.

(Zwiebelfreunde e.v. is associated with this attack using tor network that hides origins of users "in heavily censored and restricted countries". Apparently now being used to launch injection attacks on the internet.)
Posted by: Mad Eye Omeretch7959   2023-02-21 02:57  

#4  CURRENT RESIDENTS
PERSON
M**** Niman
LOCATION
2701 Centerville
Wilmington, DE 19808

PERSON
T**** Billow
LOCATION
2701 Centerville Rd
Wilmington, DE 19808

PERSON
T**** Daniels
LOCATION
2701 Centerville Rd
Wilmington, DE 19808

PERSON
S**** Watson
LOCATION
2701 Centerville Rd
Wilmington, DE 19808

Commercial/Residential

Source: Zillow com
Posted by: Mad Eye Omeretch7959   2023-02-21 02:42  

#3  185.220.101.200 Report - CIA TRIAD SECURITY LLC
IP Reputation Lookup - View Risk & Abuse Reports ; Organization, CIA TRIAD SECURITY LLC ; Time Zone, Europe/Berlin ; Latitude, 52.41999817 ; Longitude, 12.55000019.
Proxy/VPN Detection: Proxy/VPN Detected; This IP address appears to be a high risk ...
CIDR IP Address Subnet: 185.220.101.0/24
Fraud Score IP Reputation: 100 - High Risk
Posted by: Mad Eye Omeretch7959   2023-02-21 02:28  

#2  People also ask
What is CIA Triad security LLC?
Confidentiality, integrity and availability, also known as the CIA triad, is a model designed to guide policies for information security within an organization.

Google search results
Posted by: Mad Eye Omeretch7959   2023-02-21 02:26  

#1  We appear to be drawing sporadic hostile fire. We must be near the enemy.
Posted by: Besoeker   2023-02-21 02:11  

00:00