avfwclient.corp.altavista.com ?

[mark roach]

Does anyone know what this might be ?

128.177.244.100 - - [20/Sep/2000:00:06:41 -0400] "GET / HTTP/1.0" 200 9608 "-" "libwww-perl/5.44"

I am starting to get paranoid :)

[NFFC]

There is some information here [webmasterworld.com] concerning that IP, but I don't think we got to the bottom of it.

It is certainly not common, a search at Google [google.com] only finds a few results.

>I am starting to get paranoid

Yep a UA of "trufflepig [e-mail]" did that to me too. If it makes you feel better nothing bad happened after it visited "my" site.

[mark roach]

Thanks.

Just checked and it came twice yesterday as well. It took the root both times, but with a slightly different UA of libwww-perl/5.48.

[NFFC]

Looks like a human:

David Letterman message board [google.com], whose Andy?

Sportsonly board, with TC as the user. [google.com]

[mark roach]

Nice bit of snooping. Isn't that google cache useful !!!!

Maybe it was somebody running one of Bretts tools, trying to find out why I am so well ranked (irony alert) :) !

[grnidone]

NFFC

Thanks. I learned a lot from this post.

-G

[redzone]

Everything we've seen coming from 128.177.244.100 (lot's of different UA's), is from Paul Vixy alias "mibh.net"... Word on the street is he's the spam killer for AV....

Be very careful what you show this IP compared to what you show scooter....

When this IP started showing up mid last year, that's when all the trouble with "banned" domains started popping up.