[Dshield] Strange Dshield Print in our Web Log

Johannes B. Ullrich jullrich at sans.org
Wed Dec 3 02:14:56 GMT 2003


looks like they followed a link to your PGP key. The link was included
in your post to the DShield mailing list (this list) and included in the
archive (the referral URL you are seeing in your log).


On Tue, 2003-12-02 at 20:39, David Hart wrote:
> corp.external.dfw.algx.net - - [02/Dec/2003:16:14:16 -0500] "GET
> /hart_pgp.txt HTTP/1.0" 200 1409
> "http://www.dshield.org/pipermail/list/2003-September/010898.php"
> "Mozilla/4.77 [en] (Windows NT 5.0; U)"
> corp.external.dfw.algx.net - - [02/Dec/2003:16:14:21 -0500] "GET
> /email_policy.html HTTP/1.0" 200 5879 
> 
> We have three password protected web-sites so I am not familiar with the
> log detail other than attempts to break in. Can someone tell me what is
> going on here? I see that they got two files but I don't understand the
> DShield reference.
> 
>                                ---------
>             Quality Management - A Commitment to Excellence
> 
> ______________________________________________________________________
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 786 1563            
  fax: (617) 786 1550                          jullrich at sans.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20031202/16672b0c/attachment.bin


More information about the list mailing list