TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Recently our site has been getting hit by attackers using ISS against us,
using forged ISS keys.
Most of the keys have had customer ID 1234, which I think is a telltale sign
of a particular key forger program.
I may have had a different one this weekend; an ISS server logged a
"GET /Internet_Security_Scanner-Scanned_from_key_1145130318"
but I do not have possession of the key file (yet).
Surely others must have been through this before.
* Does anyone at ISS care about these incidents?
* Is there anything buried inside keys (real or forged) that might be useful
to me in investigating further?
Liudvikas Bukys
University of Rochester
[EMAIL PROTECTED]
1-585-275-7747
