[Dshield] RE: [Dshield]What is HTTP get /sumthin ?

Johannes Ullrich jullrich at euclidian.com
Fri Nov 8 03:14:51 GMT 2002

> I am new to this list and was wondering if someone could provide me with
> some info on the following line: HTTP looking for /sumthin 404. It is
> coming up quite often in my IIS logs. 

The first time I heard about the 'sumthin' URL was a couple months
back. While I don't remember a final conclusion, the overall 
consensus was that this is some kind of recognizance trying to
solicit an error message with host header.

jullrich at euclidian.com             Collaborative Intrusion Detection
                                         join http://www.dshield.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20021107/0f74536c/attachment.bin

More information about the list mailing list