[Dshield] RE: [Dshield]What is HTTP get /sumthin ?

ALEPH0 aleph0 at pacbell.net
Fri Nov 8 15:18:40 GMT 2002


...which is dumb anyway since HEAD will get you that data and will be more
likely to go unnoticed.  Netcraft began doing that a little while back even.
A robots.txt GET is also an acceptable practice that gains the same data
too.

-----Original Message-----

> I am new to this list and was wondering if someone could provide me with
> some info on the following line: HTTP looking for /sumthin 404. It is
> coming up quite often in my IIS logs.

The first time I heard about the 'sumthin' URL was a couple months
back. While I don't remember a final conclusion, the overall
consensus was that this is some kind of recognizance trying to
solicit an error message with host header.





More information about the list mailing list