If you are going to fake a user agent, do it right :) Seeing some web scanners faking all possible browsers out there in one single request:
- Firefox/3.6
- Chrome/9
- Firefox/3.0
- Opera/9.99?
- Safari
- and more..
This is the actual log (searching for vulnerable oscommerce files):
I wonder if it is a bug in their scanners or they did on purpose to bypass user agent restrictions.