Forum Moderators: open

Message Too Old, No Replies

User-Agent "GbPlugin"

Annoying HTTP requests for a non-existent .SWF file

         

jaynl

3:56 pm on Jul 14, 2009 (gmt 0)

10+ Year Member



GaryK wrote earlier on Webmaster World (2006):


gbplugin
200.230.215.nnn
c8e6dnnn.goi.virtua.com.br

Also seen from same IP Address:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Did not read robots.txt. Took disallowed files at an excessive rate. Got banned.

Only info I could find that might be related was:
gbplugin.dll
[FG/98] Productions, Inc.
InstallBuddy Plugin for Liberty

Since replies in that thread are no longer possible, I've started this new one, with additional info about this from my logfiles.

Web clients connecting with the GbPlugin, are all requesting the following .swf file, which is not on our servers. We are not the domain requested, either.

GET /bin.clearspring.com/at/v/1/button1.6.swf

More information about this from others is certainly appreciated. However, I've permanently blocked the UA in Apache and will probably not unblock it, since it's very annoying.

[edited by: incrediBILL at 4:49 pm (utc) on July 14, 2009]
[edit reason] Obscured IPs [/edit]

dstiles

8:44 pm on Jul 14, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



One of the possibilities is gbplugin.exe which is reported as a trojan (at least sometimes). One source reports...

"Can communicate with other computer systems using HTTP protocols"

Whether it includes a warning in its UA - possible?