In article
<
d22fba3e78a3d447...@foto.nl1.torservers.net>
Anonymous <
anon...@foto.nl1.torservers.net> wrote:
>
> I have been getting single 400 Bad Request errors from two IPs
> for some time now. Here are a few records from today:
>
> 141.212.120.165 21/May/2015:07:57:47 "-" 400 0
> 141.212.120.165 21/May/2015:07:57:48 "-" 400 0
> 141.212.120.165 21/May/2015:07:57:48 "-" 400 0
> 141.212.120.165 21/May/2015:07:58:12 "-" 400 0
> 141.212.120.165 21/May/2015:07:58:12 "-" 400 0
> 141.212.120.165 21/May/2015:07:58:15 "-" 400 0
> 141.212.120.165 21/May/2015:08:11:57 "-" 400 0
> 141.212.120.165 21/May/2015:08:11:57 "-" 400 0
> 141.212.120.165 21/May/2015:08:12:00 "-" 400 0
> 141.212.120.165 21/May/2015:08:27:39 "-" 400 0
> 141.212.120.165 21/May/2015:08:27:39 "-" 400 0
> 141.212.120.165 21/May/2015:08:27:42 "-" 400 0
> 141.212.120.165 21/May/2015:08:46:45 "-" 400 0
> 141.212.120.165 21/May/2015:08:46:45 "-" 400 0
> 141.212.120.165 21/May/2015:08:46:47 "-" 400 0
> 141.212.120.165 21/May/2015:09:03:59 "-" 400 0
> 141.212.120.165 21/May/2015:09:03:59 "-" 400 0
> 141.212.120.165 21/May/2015:09:04:02 "-" 400 0
> 141.212.120.165 21/May/2015:10:42:37 "-" 400 0
> 141.212.120.165 21/May/2015:10:42:37 "-" 400 0
> 141.212.120.165 21/May/2015:10:42:38 "-" 400 0
> 141.212.120.165 21/May/2015:14:04:11 "-" 400 0
> 141.212.120.165 21/May/2015:14:04:11 "-" 400 0
> 141.212.120.165 21/May/2015:14:04:21 "-" 400 0
>
> These invalid request are coming from two IPs at the University
> of Michigan. I know what 400 errors are, but is receiving one,
> two, or three in a row some kind of probe or hack attempt? They
> never try to access any valid web pages. I can't find anything
> about 400 hack attempts on the web. I have today blocked the UM
> IPs.
QUESTIONS:
165.120.212.141.in-addr.arpa, type = PTR, class = IN
AUTHORITY RECORDS:
-> 120.212.141.in-addr.arpa
type = SOA, class = IN, dlen = 61
ttl = 900 (15 mins)
primary name server =
dns.eecs.umich.edu
responsible mail addr =
help.eecs.umich.edu
It belongs to the more intelligent students of UMich, not the
affirmative action liberal morons.
https://www.eecs.umich.edu/
It's probably some eecs student trying to write an app for a
phone that uses anonymous remailers.