Forum Moderators: open

Message Too Old, No Replies

Anyone know what VB Project is?

This user agent appears followed by normal browser

         

bouncybunny

12:29 pm on May 4, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member


I get this user agent on one line of my logs, usually grabbing a partial and incorrect URL. Often this is followed by another line with a 'normal' user agent from the same IP address.

192.168.1.1 - - [01/May/2007:04:34:24 -0600] "GET /mysite/partialur HTTP/1.1" 200 34017 "-" "VB Project"
192.168.1.1 - - [01/May/2007:04:34:24 -0600] "GET /mysite/complete_url.html HTTP/1.1" 403 5 "http:/[smilestopper]/www.example.com/example.html" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3"

Any idea what this is all about?

volatilegx

8:19 pm on May 4, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



192.168.1.1 is the default Linksys home broadband router IP address. Does that ring any bells?

bouncybunny

12:26 am on May 5, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



;)

That was just an example IP address.

volatilegx

1:31 am on May 5, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Haha... that will teach me.

bouncybunny

8:34 am on May 5, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I suppose I should have used xx.xx.xx.xx really.

incrediBILL

11:11 pm on May 5, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



VB Project is the default user agent name when Visual Basic Projects access the internet.

Some DIY spider maker in action most likely.

bouncybunny

1:33 am on May 6, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thanks incrediBILL

Bearing in mind the way that this is showing up in conjunction with the browser user agent under the same IP, is there any reason that this would be neccesarily malicious, or could it be a legitimate human browser?

keyplyr

6:09 am on May 6, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Can't remember why, but I've got this UA banned. Musta been a valid reason since I don't ban easily.