Re: High volume of Mambo scans (perlb0t)

[Yuri Slobodyanyuk]

My ZoneAlarm (CA engine) identifies it (well, at least its payload) as:
PHP.Deftool