[unisog] Have heard from MediaSentry about those bad IPs

Clyde Hoadley hoadleyc at mscd.edu
Fri Jan 7 18:13:07 GMT 2005


We also received two false reports from Media Sentry
over the Christmas break.

-- 
Clyde Hoadley, CISSP
Security & Disaster Recovery Coordinator
Department of Information Technology
Metropolitan State College of Denver
http://www.mscd.edu/%7Einfotech/security
http://clem.mscd.edu/%7Ehoadleyc/
<hoadleyc at mscd.edu> TEXT Email only please - no HTML!


Chris Edwards wrote:

> On Thu, 6 Jan 2005, Pete Hickey wrote:
> 
> |
> | It's happening again.......
> |
> 
> Yup - we got a complaint from mediasentry a few days ago.  The cited IP
> address does exist, however, the we believe the machine in question was
> switched off at the time of the alleged infrinment, and had been off for
> serveral days prior.  In particular, there are no external flows for this
> IP whatsoever.  So it's hard to see how this could have been distributing
> copyrighted materials...
> 
> Interestingly, the message itself was ostensibly from the MPAA and
> contained no reference to mediasentry.  The giveaway was in the received:
> headers - the sending host being "email.mediasentry.net".
> 
> --
> Chris Edwards, Glasgow University Computing Service
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog




More information about the unisog mailing list