[Dshield] /sumthin Revisited
keith.smith at keiths-place.com
Tue Jan 7 17:02:27 GMT 2003
-----BEGIN PGP SIGNED MESSAGE-----
> According to neohapsis web site it appears to be information
> gathering attempt on your web sever.
Well, that would certainly explain the activity (including port 443) but if that's the case how come its coming from all over the place?
Has anyone considered sending /sumthin to a tar pit? Might be interesting to see what it does if it gets a 200...
Keith (no, the other one).
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the list