75% of Hits with Windows 98?!
on the virtual host that acts as default vhost (no real content there) are 75% in this style:
<random (?) ip> [timestamp] GET / HTTP/1.1 200 326 Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
Has anyone an idea what this could mean?
I don't think, there are that many Windows 98 clients out there!
Some of the ips might also be spoofed (whois <ip> doesn't return a result).
This has started somewhere in february! before that it was quite calm (some bogus requests from Code Red, etc.)
I have absolutely no clue what this could mean!
especially those requests of ips that "don't exist" in RIPE DB are quite useless, since the client wouldn't get the result of the request ...
Michael
