[plug] Apache logs

Patrick Coleman blinken at gmail.com
Wed Mar 1 10:51:59 WST 2006


Hi all,
I seem to get the following messages in my apache logs quite
frequently, and while obviously harmless I'm curious as to what the
deal is:

68.78.137.237 - - [01/Mar/2006:10:28:26 +0800] "GET / HTTP/1.1" 200
3559 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"

or:

141.151.33.156 - - [28/Feb/2006:22:35:48 +0800] "GET / HTTP/1.1" 200
3559 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"

or another one:

66.194.6.75 - - [01/Mar/2006:07:52:42 +0800] "GET / HTTP/1.1" 200 3559
"-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312468)

I'll get up to about 10 a day, all from different IPs, and while it
looks like it's requesting the index it can't be from any kind of
graphical browser as none of the images are loaded. It's always only
the index, never any of the other pages. Useragent is generally
Windows 98/MSIE 5.5, sometimes NT/MSIE 6.0 as above. This has been
happening basically since the server went online about a year ago, I
think, but I've ignored it up until now as it doesn't seem to pose any
kind of threat.

Has anyone else seen anything similar, or have any idea what the
purpose might be (other than a really, really slow DDOS :)?

-Patrick

--
http://www.labyrinthdata.net.au



More information about the plug mailing list