Forum Moderators: open

Message Too Old, No Replies

Is this some sort of IE downloader?

         

SEOPTI

4:24 pm on Jan 27, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I'm getting hit with this junk all the time.
When I do 'host 66.27.29.nn' the output is:
in-addr.arpa not found

64.27.29.nn - - [27/Jan/2007:17:13:01 +0100] "GET /xx.html HTTP/1.1" 200 5721 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:02 +0100] "GET /xx.html HTTP/1.1" 200 7091 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:02 +0100] "GET xx.html HTTP/1.1" 200 7220 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:02 +0100] "GET /xx.html HTTP/1.1" 200 7264 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:03 +0100] "GET /xx.html HTTP/1.1" 200 7201 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:03 +0100] "GET /xx.html HTTP/1.1" 200 6872 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:04 +0100] "GET /xx.html HTTP/1.1" 200 7093 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:05 +0100] "GET xx.html HTTP/1.1" 200 5177 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:05 +0100] "GET xx.html HTTP/1.1" 200 7286 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:05 +0100] "GET xx.html HTTP/1.1" 200 2701 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:06 +0100] "GET xx.html HTTP/1.1" 200 2352 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:06 +0100] "GET xxma.html HTTP/1.1" 200 5042 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:06 +0100] "GET xx.html HTTP/1.1" 200 6594 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:06 +0100] "GET xx.html HTTP/1.1" 200 5900 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:07 +0100] "GET xx.html HTTP/1.1" 200 3453 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:07 +0100] "GET xx.html HTTP/1.1" 200 3923 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"
64.27.29.nn - - [27/Jan/2007:17:13:07 +0100] "GET xx.html HTTP/1.1" 200 7100 "-" "Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)"

[edited by: volatilegx at 5:24 pm (utc) on Jan. 27, 2007]
[edit reason] obscured IP address [/edit]

wilderness

5:45 pm on Jan 27, 2007 (gmt 0)

wilderness

5:51 pm on Jan 27, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



BTW and for the sake of cordiallity?

As you previously reported the downloading of "hundreds of pages from multiple IP's" it's obviously downloading!

Don

thetrasher

10:20 pm on Jan 27, 2007 (gmt 0)

10+ Year Member



Users surfing in data center, eh?

Try http://64.27.29.nn/

wilderness

11:01 pm on Jan 27, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



trasher,
the flaw in the UA is an open space.
It's long been noticed and referenced to.

Don