203.24.143.197

bot used to steal?

[coyote]

I found this IP in my log with the UA ColdFusion. I thought it may be some kind of link checker or validator.
So I traced the IP and found it belongs to http ://www.kcpublications.com.au

Judging by the site's service, it would seem that any crawler sent out from there is used to rip-off content.

Anyone else seen this one?

[bull]

had a similar one today (posted here because of the TLD):

211.99.203.198 - - [18/Sep/2003:14:02:23 +0200] "GET / HTTP/1.1" 200 2361 www.-.net "http*//www.intertextual.com.au" "Mozilla/4.0 (compatible; MSIE 5.00; Windows 98" "-"
211.99.203.198 - - [18/Sep/2003:14:02:26 +0200] "GET /favicon.ico HTTP/1.1" 200 318 www.-.net "http*//www.intertextual.com.au" "Mozilla/4.0 (compatible; MSIE 5.00; Windows 98" "-"
211.99.203.198 - - [18/Sep/2003:14:03:25 +0200] "GET /+ HTTP/1.1" 301 237 www.-.net "http://www.-.net/indexd.html" "Mozilla/4.0 (compatible; MSIE 5.00; Windows 98" "-"
211.99.203.198 - - [18/Sep/2003:14:03:26 +0200] "GET /. HTTP/1.1" 200 2361 www.-.net "http://www.-.net/+" "Mozilla/4.0 (compatible; MSIE 5.00; Windows 98" "-"

dumb one, producing a bunch of 404s, uncapable to interpret relative links (LUCKILY!) so it did not get any content from me. Note the UA string missing the closing bracket. No robots. No real information on the URL that served as referer.
The IP is a china dialup though :
deny from 211.99.

[carfac]

On this one, you only need to deny 211.99.200.0 - 211.99.203.255
Strange, an "au" domain from China...

dave

[wilderness]

Dave,
There are some Oceanic ranges in very scatterd places amongst the overall APNIC ranges.

I do have a diverse gathering of Oceanic ranges, although incomplete. Mostly 203's however I have some others added in as well.
If anybody desires the ranges?
Sticky me.

Don