Urldefense gets prepended to URLs in e-mail as it passes through a solution called ProofPoint.
One would assume that an organization like Boeing would be using a solution such as what ProofPoint offers. —- A Get Outlook for iOS<https://urldefense.proofpoint.com/v2/url?u=https-3A__aka.ms_o0ukef&d=DwIF-g&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=MQr0X7DMMAqNR-2zlVAzIcpuYDa0vmT-AlTaI_-JCuc&s=cWY5Dl6Tl78s0R0_nhmPiprGxEnQLQnIKWPsjtZPy2w&e=> ________________________________ From: 30101714000n behalf of Sent: Saturday, July 21, 2018 10:13 AM To: scientific-linux-us...@listserv.fnal.gov Subject: Re: urldefence?!? Re: Create bootable ISO that can be copied to a USB key On Fri, Jul 20, 2018 at 07:04:52PM -0700, Konstantin Olchanski wrote: > On Fri, Jul 20, 2018 at 05:37:34PM -0700, Konstantin Olchanski wrote: > > Here is my recipe for doing what you are doing: > > https://urldefense.proofpoint.com/v2/url?u=https-3A__daqshare.triumf.ca_-7Eolchansk_linux_CentOS7_AAA-2DREADME-2DUSBBOOT.txt&d=DwIBAg&c=gRgGjJ3BkIsb5y6s49QqsA&r=gd8BzeSQcySVxr0gDWSEbN-P-pgDXkdyCtaMqdCgPPdW1cyL5RIpaIYrCn8C5x2A&m=fk0JY3BhmGxCfN3pBlvgoU0w4oeNX-YtFJkujmomPYY&s=O0aGOYpKPfw848g7KU-jZW8EGsRnZL7EQomfx6fHYXo&e= > WTF, urldefence, really?!? On second thoughts, never mind. It's just the Departement of Privacy (the new sibling of Dept of Love and Dept of Peace) going about their business. Same as after using the sslabs https test tool I see my newly setup web server getting probed by everybody and their dog; now posting a URL to a public mailing list attracts the same kind of attention. (maybe it's not "urldefence" leaking the data to 3rd parties, maybe it's the mailing list "archive service" or they just scrape the mailing list archives directly). I hope this is not wildly off-topic, but I am certainly surprised and I will be more careful about what I post to this mailing list. "The walls have ears", as they say, but these specific ears seem to have hands, as well. Here is the hits on my AAA-README file from the web server logs. No hits before my message to the mailing list. Afterwards, at at least some of the repeated GETs from repeated IP addresses look like robots. And too many hits altogether. I wish everybody would read my README file and become enlightened, but I think not. K.O. [root@daqshare httpd]# grep AAA ssl_access_log | sort 108.233.44.194 - - [20/Jul/2018:19:08:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 130.180.57.94 - - [21/Jul/2018:04:46:51 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 159.93.44.107 - - [21/Jul/2018:00:49:55 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 170.231.7.54 - - [20/Jul/2018:18:04:59 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.185.86.122 - - [20/Jul/2018:20:06:34 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.204.44.205 - - [21/Jul/2018:06:43:40 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.206.90.46 - - [21/Jul/2018:00:09:28 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.207.100.116 - - [21/Jul/2018:05:30:35 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.207.183.231 - - [21/Jul/2018:00:50:16 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.208.195.101 - - [21/Jul/2018:04:47:13 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 18.209.212.163 - - [20/Jul/2018:20:43:59 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 184.66.246.4 - - [20/Jul/2018:22:44:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 185.180.48.209 - - [20/Jul/2018:20:43:34 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 204.141.38.224 - - [21/Jul/2018:06:43:12 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 210.14.99.3 - - [20/Jul/2018:18:12:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.200.240.227 - - [20/Jul/2018:19:09:00 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.201.205.73 - - [20/Jul/2018:18:20:05 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.201.56.50 - - [20/Jul/2018:22:12:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.231.157.157 - - [20/Jul/2018:19:08:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.232.127.140 - - [20/Jul/2018:18:19:47 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.232.127.140 - - [20/Jul/2018:20:43:35 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.232.127.140 - - [21/Jul/2018:00:09:09 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 34.232.127.140 - - [21/Jul/2018:00:49:57 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 35.170.198.113 - - [20/Jul/2018:17:45:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [20/Jul/2018:17:44:50 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [20/Jul/2018:20:06:14 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [20/Jul/2018:22:11:42 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [20/Jul/2018:22:44:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [21/Jul/2018:04:46:53 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [21/Jul/2018:05:30:14 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 52.44.93.197 - - [21/Jul/2018:06:43:15 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 59.167.166.61 - - [20/Jul/2018:17:44:48 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 70.79.129.98 - - [20/Jul/2018:17:35:39 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 73.51.225.92 - - [21/Jul/2018:00:55:55 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 76.70.81.240 - - [20/Jul/2018:20:06:12 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 79.112.126.75 - - [21/Jul/2018:01:16:57 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 87.112.42.124 - - [20/Jul/2018:18:19:45 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 87.112.42.124 - - [21/Jul/2018:05:30:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 89.106.102.169 - - [20/Jul/2018:22:12:25 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 91.16.72.63 - - [20/Jul/2018:22:11:38 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 92.170.44.249 - - [21/Jul/2018:00:09:07 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 92.170.44.249 - - [21/Jul/2018:00:10:11 -0700] "GET /~olchansk/linux/CentOS7/AAA-README-USBBOOT.txt HTTP/1.1" 200 2102 [root@daqshare httpd]# -- Konstantin Olchanski Data Acquisition Systems: The Bytes Must Flow! Email: olchansk-at-triumf-dot-ca Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada
