Ender
04-10-2004, 07:53 AM
I keep getting this (or similar) in my apache logs
68.248.78.17 - - [10/Apr/2004:04:33:34 -0400] "GET / HTTP/1.1" 200 13538
Looks normal, right? Well, the other thing about these hits are:
1.) They never download *anything* but simply my homepage. No graphics, nothing else.
2.) They're invariably logged as Windows98, MSIE 5.5.
3.) 80-90% of these hits come from China or Japan.
4.) If it weren't for 1, 2, and 3 above, I'd assume they all had graphics disabled for one reason or another.
Any thoughts? I'm thinking virus, but wish to know if anyone's had experience with people using their files and bandwidth via remote linking. (I saw a thread on this somewhere, but cannot squeeze it out of google to save my life.)
(Mods, feel free to move the post; I wasn't sure quite where to post it.)
68.248.78.17 - - [10/Apr/2004:04:33:34 -0400] "GET / HTTP/1.1" 200 13538
Looks normal, right? Well, the other thing about these hits are:
1.) They never download *anything* but simply my homepage. No graphics, nothing else.
2.) They're invariably logged as Windows98, MSIE 5.5.
3.) 80-90% of these hits come from China or Japan.
4.) If it weren't for 1, 2, and 3 above, I'd assume they all had graphics disabled for one reason or another.
Any thoughts? I'm thinking virus, but wish to know if anyone's had experience with people using their files and bandwidth via remote linking. (I saw a thread on this somewhere, but cannot squeeze it out of google to save my life.)
(Mods, feel free to move the post; I wasn't sure quite where to post it.)