From aschrock@zip0.zipnet.net Fri Jul 26 04:25:33 1996 Received: from pdx1 (pdx1.world.net [192.243.32.18]) by suburbia.net (8.7.4/Proff-950810) with SMTP id EAA08083 for ; Fri, 26 Jul 1996 04:25:23 +1000 Received: from zip0.zipnet.net (zip0.zipnet.net [199.232.240.20]) by pdx1 (8.6.9/8.6.9) with ESMTP id KAA29669 for ; Thu, 25 Jul 1996 10:27:11 -0700 Received: from localhost (aschrock@localhost) by zip0.zipnet.net (8.7.3/8.6.12) with SMTP id NAA25399 for ; Thu, 25 Jul 1996 13:19:11 -0400 (EDT) Date: Thu, 25 Jul 1996 13:19:11 -0400 (EDT) From: Andrew To: "'Best-Of-Security'" Subject: Re: BoS: Aggressive Web Vulnerability Probe In-Reply-To: <199607251646.AA00306@gateway.ppg.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII On Thu, 25 Jul 1996, Sacherich, Larry wrote: > I have logged only one probe from sentry.wood.com so far. And > I'm not real happy about it. When I visited their Web site at > www.wood.com they said it was for authorized users only! Who > is wood.com? I would go out on a limb (no pun intended) and say that whoever registered wood.com did it with a fake number and other info. The postal address is a PO box, and the number is "disconnected". It might even be a ppp link, since it seems to not be up all the time. I would suggest that we get back on topic to more relavent things, as this discussion of a single site launching repeated probes is relavent to the mailing list, but not really informative past the point where no new material is being divulged. If any more information comes up I would love to hear it, but let's put a cap on it for now. -- Andrew Schrock | These opinions are mine and mine only. aschrock@zipnet.net | finger for pgp key