[unisog] Have heard from MediaSentry about those bad IPs

Clyde Hoadley hoadleyc at mscd.edu
Fri Jan 7 18:13:07 GMT 2005

We also received two false reports from Media Sentry
over the Christmas break.

Clyde Hoadley, CISSP
Security & Disaster Recovery Coordinator
Department of Information Technology
Metropolitan State College of Denver
<hoadleyc at mscd.edu> TEXT Email only please - no HTML!

Chris Edwards wrote:

> On Thu, 6 Jan 2005, Pete Hickey wrote:
> |
> | It's happening again.......
> |
> Yup - we got a complaint from mediasentry a few days ago.  The cited IP
> address does exist, however, the we believe the machine in question was
> switched off at the time of the alleged infrinment, and had been off for
> serveral days prior.  In particular, there are no external flows for this
> IP whatsoever.  So it's hard to see how this could have been distributing
> copyrighted materials...
> Interestingly, the message itself was ostensibly from the MPAA and
> contained no reference to mediasentry.  The giveaway was in the received:
> headers - the sending host being "email.mediasentry.net".
> --
> Chris Edwards, Glasgow University Computing Service
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog

More information about the unisog mailing list