SCIENTIFIC-LINUX-USERS Archives

July 2018

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: urldefence?!? Re: Create bootable ISO that can be copied to a USB key
From:
Konstantin Olchanski <[log in to unmask]>
Reply To:
Konstantin Olchanski <[log in to unmask]>
Date:
Sat, 21 Jul 2018 07:13:30 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (80 lines) 
On Fri, Jul 20, 2018 at 07:04:52PM -0700, Konstantin Olchanski wrote:
> On Fri, Jul 20, 2018 at 05:37:34PM -0700, Konstantin Olchanski wrote:
> > Here is my recipe for doing what you are doing:
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__daqshare.triumf.ca_-7Eolchansk_linux_CentOS7_AAA-2DREADME-2DUSBBOOT.txt&d=DwIBAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=fk0JY3BhmGxCfN3pBlvgoU0w4oeNX-YtFJkujmomPYY&s=O0aGOYpKPfw848g7KU-jZW8EGsRnZL7EQomfx6fHYXo&e=
> WTF, urldefence, really?!?

On second thoughts, never mind. It's just the Departement of Privacy (the new
sibling of Dept of Love and Dept of Peace) going about their business.

Same as after using the sslabs https test tool I see my newly setup web server
getting probed by everybody and their dog; now posting a URL to a public mailing list
attracts the same kind of attention.

(maybe it's not "urldefence" leaking the data to 3rd parties, maybe it's the mailing
list "archive service" or they just scrape the mailing list archives directly).

I hope this is not wildly off-topic, but I am certainly surprised and I will be more
careful about what I post to this mailing list. "The walls have ears", as they say,
but these specific ears seem to have hands, as well.

Here is the hits on my AAA-README file from the web server logs. No hits before my message
to the mailing list. Afterwards, at at least some of the repeated GETs from repeated IP addresses
look like robots. And too many hits altogether. I wish everybody would
read my README file and become enlightened, but I think not.

K.O.


[root@daqshare httpd]# grep AAA ssl_access_log | sort
108.233.44.194 - - [20/Jul/2018:19:08:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
130.180.57.94 - - [21/Jul/2018:04:46:51 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
159.93.44.107 - - [21/Jul/2018:00:49:55 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
170.231.7.54 - - [20/Jul/2018:18:04:59 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.185.86.122 - - [20/Jul/2018:20:06:34 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.204.44.205 - - [21/Jul/2018:06:43:40 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.206.90.46 - - [21/Jul/2018:00:09:28 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.207.100.116 - - [21/Jul/2018:05:30:35 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.207.183.231 - - [21/Jul/2018:00:50:16 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.208.195.101 - - [21/Jul/2018:04:47:13 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
18.209.212.163 - - [20/Jul/2018:20:43:59 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
184.66.246.4 - - [20/Jul/2018:22:44:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
185.180.48.209 - - [20/Jul/2018:20:43:34 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
204.141.38.224 - - [21/Jul/2018:06:43:12 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
210.14.99.3 - - [20/Jul/2018:18:12:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.200.240.227 - - [20/Jul/2018:19:09:00 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.201.205.73 - - [20/Jul/2018:18:20:05 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.201.56.50 - - [20/Jul/2018:22:12:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.231.157.157 - - [20/Jul/2018:19:08:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.232.127.140 - - [20/Jul/2018:18:19:47 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.232.127.140 - - [20/Jul/2018:20:43:35 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.232.127.140 - - [21/Jul/2018:00:09:09 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
34.232.127.140 - - [21/Jul/2018:00:49:57 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
35.170.198.113 - - [20/Jul/2018:17:45:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [20/Jul/2018:17:44:50 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [20/Jul/2018:20:06:14 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [20/Jul/2018:22:11:42 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [20/Jul/2018:22:44:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [21/Jul/2018:04:46:53 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [21/Jul/2018:05:30:14 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
52.44.93.197 - - [21/Jul/2018:06:43:15 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
59.167.166.61 - - [20/Jul/2018:17:44:48 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
70.79.129.98 - - [20/Jul/2018:17:35:39 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
73.51.225.92 - - [21/Jul/2018:00:55:55 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
76.70.81.240 - - [20/Jul/2018:20:06:12 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
79.112.126.75 - - [21/Jul/2018:01:16:57 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
87.112.42.124 - - [20/Jul/2018:18:19:45 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
87.112.42.124 - - [21/Jul/2018:05:30:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
89.106.102.169 - - [20/Jul/2018:22:12:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
91.16.72.63 - - [20/Jul/2018:22:11:38 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
92.170.44.249 - - [21/Jul/2018:00:09:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
92.170.44.249 - - [21/Jul/2018:00:10:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102
[root@daqshare httpd]# 


-- 
Konstantin Olchanski
Data Acquisition Systems: The Bytes Must Flow!
Email: olchansk-at-triumf-dot-ca
Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada

ATOM RSS1 RSS2