Re: High volume of Mambo scans (perlb0t)

"Yuri Slobodyanyuk" <[email protected]> Mon, 15 May 2006 19:36:24 +0200
Newsgroups gmane.comp.security.incidents
Message-ID <006a01c67846$19029000$b8d6fea9@nasa>
My ZoneAlarm (CA engine) identifies it (well, at least its payload) as:
PHP.Deftool