From jacksch@tenebris.com  Thu Jul 25 03:09:34 1996
Received: from vision.tenebris.com (jacksch@vision.tenebris.com [205.207.205.1]) by suburbia.net (8.7.4/Proff-950810) with SMTP id DAA24465 for <best-of-security@suburbia.net>; Thu, 25 Jul 1996 03:08:55 +1000
Received: (from jacksch@localhost) by vision.tenebris.com (8.6.12/8.6.12) id NAA15394; Wed, 24 Jul 1996 13:08:04 -0400
Date: Wed, 24 Jul 1996 13:08:00 -0400 (EDT)
From: Eric Jacksch <jacksch@tenebris.com>
To: Randy Terbush <randy@zyzzyva.com>
cc: best-of-security@suburbia.net
Subject: Re: BoS: Agressive Web Vulnerability Probe
In-Reply-To: <199607241647.LAA11168@sierra.zyzzyva.com>
Message-ID: <Pine.LNX.3.91.960724130656.14984I-100000@vision.tenebris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Wed, 24 Jul 1996, Randy Terbush wrote:

> I'm forwarding the following log info for a recent probe on some of
> our web servers. From conversations with other web admins across the
> country, this probe has been extremely far reaching. Attempts to
> contact the source of the probe have been unsuccessful.

> sentry.wood.com - - [14/Jul/1996:22:43:17 -0500] "GET /cgi-bin/phf?Qalias=foo%0a
> id" 404 419

We've logged that on a number of servers in this area.  Email to wood.com,
and a phone call to their service provider has not been returned.

Regards,
Eric

Ottawa, Ontario, Canada

---------------------------------------------------
    Eric Jacksch         Tenebris Technologies Inc.
jacksch@tenebris.com      http://www.tenebris.com
---------------------------------------------------

