MPFv7.0.0.153

To script or not to script?

[JAB Creations]

Same IP had this UA...

"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

Then it posted this ONLY when requests were made for JS files...

64.136.49.*** - - [15/Sep/2005:20:09:00 +0000] "GET /scripts/script-click.js HTTP/1.1" 200 425 "-" "MPFv7.0.0.153"
64.136.49.*** - - [15/Sep/2005:20:09:00 +0000] "GET /scripts/script-resize.js HTTP/1.1" 200 55 "-" "MPFv7.0.0.153"
64.136.49.*** - - [15/Sep/2005:20:09:01 +0000] "GET /scripts/script-style.js HTTP/1.1" 200 1398 "-" "MPFv7.0.0.153"
64.136.49.*** - - [15/Sep/2005:20:09:01 +0000] "GET /scripts/script-target.js HTTP/1.1" 200 441 "-" "MPFv7.0.0.153"
64.136.49.*** - - [15/Sep/2005:20:09:01 +0000] "GET /scripts/script-window-status.js HTTP/1.1" 200 75 "-" "MPFv7.0.0.153"
64.136.49.*** - - [15/Sep/2005:20:09:15 +0000] "GET /scripts/script-frameset-gamer.js HTTP/1.1" 200 1924 "-" "MPFv7.0.0.153"

Found nothing online that I could relate it to. Seems to be an IE addon/leech. Maybe it's sending JS files for someone who REALLY wants to learn JavaScript? ;)

[edited by: volatilegx at 8:29 pm (utc) on Sep. 18, 2005]
[edit reason] obscured IP address [/edit]

[wilderness]

Had a vey similar IP with a refer to a website which utilizes Java to install Spy Sheriff.

Also visited with the standard UA
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

Don