Welcome to WebmasterWorld Guest from 126.96.36.199
188.8.131.52 - - [27/Apr/2001:03:04:47 -0600] "GET /fortuna.htm HTTP/1.1" 200 9181 "http://www.google.com/search?q=Sors+salutis+et+virtutis&btnG=Google+Search" "Mozilla/5.0 (X11; U; Linux 2.2.16-22smp i686; en-US; 0.7) Gecko/20010129"
184.108.40.206 - - [27/Apr/2001:03:05:30 -0600] "GET /Moon-ani.gif HTTP/1.1" 200 93875 "" "Mozilla/5.0 (X11; U; Linux 2.2.16-22smp i686; en-US; 0.7) Gecko/20010129"
Then in proceeded to request this file and one other over and over again about once every 60 seconds or so for several hours. The other file was also a GIF and it did not check robots.txt.
descr: Planet Online Limited
descr: The White House
descr: Melbourne St.
descr: Leeds LS2 7PS United Kingdom
See [theplanet.net...] which is an e-business solutions company.
(From Netscape )
"...Gecko is Netscape's revolutionary next generation browser engine. It features industry-leading, fully compliant standards support (including HTML 4.0, XML, CSS, and DOM) and is small, fast, and modular."
a search on Gecko/20010129 also gave these results.
(Galeon is a Gnome based browser)...
"Galeon gives the following UA string: Mozilla/5.0 (X11; U; Linux 2.4.1 i686, en-US; Galeon) Gecko/20010129"
I suspect, given SugarBane's experience, that there's a bug in Gecko somewhere and these are ordinary surfers rather than bots.
LOL - it wasn't so low level around here, my service was entirely denied for a couple of minutes ;)
The thought of a deliberate attack did enter my mind (I must be just as paranoid), but it seems an elaborate way to do it.
I'll still be keeping a close eye on my bandwidth stats over the next few days though....