| Opera (Ukraine Edition)
Odd Substring In User Agent |
iamzippy
msg:4486693 | 7:52 am on Aug 21, 2012 (gmt 0) |
I just trashed a 270-word gibberish spam comment that was liberally sprinkled with the word 'marijuana' and contained a single link.
It came out of 68.169.32.0/20 (WestHost Inc., Providence, UT) with the UA:
"Opera/9.80 (Windows NT 6.1; WOW64; U; Edition Ukraine Local; ru) Presto/2.10.229 Version/11.64"
Edition Ukraine Local?
|
wilderness
msg:4486881 | 4:44 pm on Aug 21, 2012 (gmt 0) |
206.130.96.0 - 206.130.127.255
208.131.128.0 - 208.131.159.255
209.236.64.0 - 209.236.79.255
67.212.224.0 - 67.212.239.255
68.169.32.0 - 68.169.47.255
69.36.160.0 - 69.36.191.255
|
iamzippy
msg:4486901 | 5:29 pm on Aug 21, 2012 (gmt 0) |
Ya, cheers for that, w.
I'm particularly interested in the 'Local Edition' nonsense. Wtf is that?
|
lucy24
msg:4487008 | 9:36 pm on Aug 21, 2012 (gmt 0) |
:: detour to raw logs ::
It's human. That is: the visitor in your OP was not necessarily human. But the "Local Edition" element can occur in normal human UAs. That includes-- hold on to your hats--
Opera/9.80 (Windows NT 6.1; WOW64; U; Edition United States Local; en) Presto/2.10.229 Version/11.64
with small variations in version number over time. It's rare-- and I've got a small site to start with-- but most of them are in definitely-human contexts. Ukraine Local seems to be the most common, always "ru" rather than "uk" (the language). There are also some United Kingdom Local and Indian Local (again, all "en").
Wait, it gets better. Some further digging suggests that I may be able to put a name to one of them. Want me to go ask?
|
|
|
