Perhaps they are using Multi-thread Cisco HTTP vulnerable scanner v0.2 in a distributed way. It can be found at http://whangun.com/index.php?pl=242. I hope it was helpful. Regards, Julio Cesar Fort Recife, PE, Brazil www.rfdslabs.com.br - computers, sex, human mind, music and more.