[Gllug] Wierd UserAgent string in apache access_log

[will]

I have noticed a couple of these wierd access log entries:

61.103.86.71 - - [27/Nov/2003:00:38:03 +0100] "GET 
/humour-direct-banner2.jpg HTTP/1.1" 200 4690 
"http://www.humordirect.com/links/" "Mozilla/4.0 (compatible; MSIE 5.5; 
Windows 98; \xbe\xc6\xc6\xae\xb9\xcc\xb5\xf0\xbe\xee)"

Of particular interest is the string:

\xbe\xc6\xc6\xae\xb9\xcc\xb5\xf0\xbe\xee

I have googled for this and no-one seems to have identified it.  The 
only time I have ever seen this sort of string format before is in 
'shellcode'.  Is this what it is, and if so, what is being attempted? 
Anyone seen this before?

Will.


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug