cyberdyne - 12:40 pm on Feb 23, 2012 (gmt 0)
I'm guessing by all the comments that the jury is still out on this one. I think I'll have to give the user the benefit of the doubt for now, unless it can be definitively proved one way or the other. Either way, I do appreciate everyone's opinions.
May not be a lie. Could be proxy or dhcp assigned.
The downloader had that IP one day. The next day it was used by honest Joe.
Regarding this post, the use of HTTrack and the 'legitimate' visit were one in the same. ie: the copied data I've provided above was an extract from the middle of the 'legitimate' visit log data.
visit from a Virgin Media customer during which five hits from the U-A: HTTrack