Re: [Sks-devel] Just coincidence or targeted attack?

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 05/19/2014 07:12 PM, Tobias Frei wrote:
> Hi,
> 

Hi Tobias,

> running "tail -f db.log" gave me weird requests like these:
> 

> 2014-05-19 18:35:57 Error handling request (POST,/pks/add,[ 
> accept:*/* connection:close content-length:82 
> content-type:application/x-www-form-urlencoded 
> host:127.0.0.1:11372]): Failure("Error while decoding
> ascii-armored key: text terminated before beginning of ascii
> block")

^^ This

> 2014-05-19 18:36:01 Page not found: 
> /pks/lookup/undefined1<ScRiPt>prompt('CVE-2014-3207')</ScRiPt>

^^ And this

> 2014-05-19 18:36:38 No results for request

Is part of the pool detection

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Bene diagnoscitur, bene curatur
Something that is well diagnosed can be cured well
-----BEGIN PGP SIGNATURE-----
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=Ugz9
-----END PGP SIGNATURE-----