anyone know what this is pse?

[FUNKMASTER]

hi all iv seen this come up a couple of time's in my log and was wondering if anyone seen this before ? or know what it's all about ?

02/05/06@12:58:07> [dest: 64.233.14.148] Invalid resource request(/w00tw00t.at.ISC.SANS.DFind)
Tnx andy

[drewbar]

http://isc.sans.org/diary.php?storyid=591

Ignore it.

[Menchions]

Yes, i get one that says invalid request file /robots.txt and ive been getting it for like 7 months now.. anyone know what it is?

[djSpinnerCee]

a request for /robots.txt comes from a search engine web crawler like the Googlebot -- a good thing.

Obviously, there is no /robots.txt available from the DNAS (404 not found) thus the "invalid resource."

You may also see an invalid resource message if the client sends the wrong HTTP method [ie HEAD], or does not have "mozilla" in the HTTP user-agent header that should accompany the request, regardless of what they "ask for.

[FUNKMASTER]

http://isc.sans.org/diary.php?storyid=900
Handler's Diary November 29th 2005

previous - next

w00tw00t
Published: 2005-11-29,
Last Updated: 2005-11-30 05:49:00 UTC by Swa Frantzen (Version: 1)

Following our request for help, a while ago, we received another submission of somebody finding the following in his web logs:

"GET /w00tw00t.at.ISC.SANS.DFind"

It seems that we forgot to tell our whitehat readers that the search is off. We know what's behind it. It's a web vulnerability scanner that has this fingerprint. Find and use it at your own risk. We at the Internet Storm Center distance ourselves from this tool that is labeled by at least one security company as a hacker tool...

[drewbar]

It's not going to do anything to your SHOUTcast server. Don't be so paranoid.