[64395] in North American Network Operators' Group
Unusual GET requests
daemon@ATHENA.MIT.EDU (Brian Bruns)
Tue Oct 21 21:00:07 2003
From: "Brian Bruns" <bruns@2mbit.com>
To: <nanog@merit.edu>
Cc: <admins@2mbit.com>
Date: Tue, 21 Oct 2003 20:59:22 -0400
X-SA-Exim-Mail-From: bruns@2mbit.com
Errors-To: owner-nanog-outgoing@merit.edu
Hmmm, this is probably offtopic, but I can't seem to find anything online
which explains this and I've never seen it before.
Maybe someone else here has seen this in their logs or has any idea what
would do this?
Its obviously trying to gather some sort of information, could it be a
prelude to some sort of DoS or exploit thats not publically known yet?
68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /pad-Files HTTP/1.1" 404
322
"-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /PAD-FILES HTTP/1.1" 404
322
"-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:49 -0500] "GET /Pad-Files HTTP/1.1" 404
322
"-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /Pad-files HTTP/1.1" 404
322
"-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /pad-files HTTP/1.1" 404
322
"-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /PAD-FILE HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:48 -0500] "GET /Pad-file HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:47 -0500] "GET /pad-File HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:47 -0500] "GET /Pad-File HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /PadFiles HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /Padfiles HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /PADFILES HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:44 -0500] "GET /padfiles HTTP/1.1" 404
321 "
-" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PadFile HTTP/1.1" 404
320 "-
" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /Padfile HTTP/1.1" 404
320 "-
" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PADFILE HTTP/1.1" 404
320 "-
" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /padfile HTTP/1.1" 404
320 "-
" "libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /Pads HTTP/1.1" 404 317
"-" "
libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:43 -0500] "GET /PADS HTTP/1.1" 404 317
"-" "
libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /pads HTTP/1.1" 404 317
"-" "
libwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /Pad HTTP/1.1" 404 316
"-" "l
ibwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /PAD HTTP/1.1" 404 316
"-" "l
ibwww-perl/5.65"
68.63.88.173 - - [21/Oct/2003:19:47:42 -0500] "GET /pad HTTP/1.1" 404 316
"-" "l
ibwww-perl/5.65"
--------------------------
Brian Bruns
The Summit Open Source Development Group
Open Solutions For A Closed World / Anti-Spam Resources
http://www.sosdg.org
ICQ: 8077511
