[Dshield] /sumthin Revisited

Keith Smith keith.smith at keiths-place.com
Tue Jan 7 17:02:27 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> According to neohapsis web site it appears to be information 
> gathering attempt on your web sever.

// lurkerMode--;

Well, that would certainly explain the activity (including port 443) but if that's the case how come its coming from all over the place?

Has anyone considered sending /sumthin to a tar pit?  Might be interesting to see what it does if it gets a 200...


Regards,
Keith  (no, the other one).

-----BEGIN PGP SIGNATURE-----
Version: 6.5.8ckt

iQA/AwUBPhrsBL0tREWslyrAEQLBlQCeKdpQpwgaMab6jXhTdhqOnYAkBkcAni8J
6x2Ck5qYVHN6QFZah3+pyCcS
=Vs5I
-----END PGP SIGNATURE-----





More information about the list mailing list