[SLL] probes of webserver

William Kreuter billyk at drizzle.com
Tue Aug 5 08:18:31 PDT 2008


I accidentally deleted and lost track of the posting
that appeared on this list a few days ago mentioning
an http probe from a particular site.  But I remember
that the site was exactly the same as appeared in my
logs the preceding night:

  GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 403 2 responses

So I imagine that scifi.pages.at was just a
run-o-the-mill compromised box that was
zombie-probing everybody everywhere.

If this is helpful to the original poster, or anyone
else.

Billy



More information about the linux-list mailing list