[SLL] probes of webserver
William Kreuter
billyk at drizzle.com
Tue Aug 5 08:18:31 PDT 2008
I accidentally deleted and lost track of the posting
that appeared on this list a few days ago mentioning
an http probe from a particular site. But I remember
that the site was exactly the same as appeared in my
logs the preceding night:
GET http://scifi.pages.at/myproxies/azenv.php HTTP/1.1 with response code(s) 403 2 responses
So I imagine that scifi.pages.at was just a
run-o-the-mill compromised box that was
zombie-probing everybody everywhere.
If this is helpful to the original poster, or anyone
else.
Billy
More information about the linux-list
mailing list