Re: ICQ 2000

[slide () TELLURIAN COM AU (Sean Burford)]

> http://download-icq2000.hypermart.net/stats/101999.html
> Take a look at there stats, the IP of the creator is there too, should be
> one of the 1st having access....

http://download-icq2000.hypermart.net/stats/raw_logfile.gz
contains the raw httpd log.

I love log files :)

The first recorded visitor was from 212.124.65.135 on
[14/Oct/1999:08:40:10 -0700].  Access patterns from internet-bg.net from
then on were as follows:

212.124.65.135  14/Oct/1999 08:40 08:43 08:44 09:31 09:32 09:34
212.124.65.125  14/Oct/1999 11:04
212.124.65.194  14/Oct/1999 23:00 23:01
212.124.65.53   14/Oct/1999 23:11
212.124.65.7    15/Oct/1999 01:18 (different browser)
212.124.65.127  15/Oct/1999 01:19 01:20
212.124.65.7    15/Oct/1999 01:36 (different browser)
212.124.65.39   16/Oct/1999 09:42
212.124.65.244  18/Oct/1999 23:21
212.124.65.89   22/Oct/1999 02:42
212.124.65.73   25/Oct/1999 00:10 00:11 00:12 (different browser)
212.124.65.219  25/Oct/1999 06:46 (different browser)

Of course, this log file is probably not evidence of any kind, since it
could probably be modified by the web site owner anyway.

Sean

Ps.  Note there are a lot of requests for /favicon.ico.  I think this
happens when IE users bookmark the page.  That icon, if it exists, is used
as the bookmark icon.  There was something on BugTraq recently relating to
crashing IE with a badly formed favicon.ico ;)

Anyone know what the requests for /autoconfig.htm from IE 5.0 by a user at
24.11.181.x are related to?  I assume this person has that IP set up as
a location to automatically get their IE settings (proxy, etc) from.