[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] Strange HTTP requests

To: full-disclosure@xxxxxxxxxxxxxxxxx
Subject: [Full-disclosure] Strange HTTP requests
From: Shannon Johnston <sjohnston@xxxxxxxxxxxxxx>
Date: Wed, 14 Jun 2006 14:17:17 -0600

I'm seeing a ton of HTTP requests in the following fashion:

GET index.html - 80 - <ip address> HTTP/1.1 fuujcbjbGbagkmkGuj7kmgnebl
+qekaf - - website.com 302 0 0 532 206 218

The random string would normally be the user-agent. I can't help but
think this is a bot of some sort.

Anybody know of anything that would produce this?



Thanks,
SJ

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- RE: [Full-disclosure] Strange HTTP requests
  - From: php0t

Prev by Date: [Full-disclosure] Sun iPlanet Messaging Server 5.2 root password compromise
Next by Date: Re: [Full-disclosure] All new anti-cyber terror website
Previous by thread: [Full-disclosure] Sun iPlanet Messaging Server 5.2 root password compromise
Next by thread: RE: [Full-disclosure] Strange HTTP requests
Index(es):
- Date
- Thread