Ocp Hrs 1.0

I suspect it's an image bot.

[GaryK]

I saw this user agent in my logs:
OCP HRS 1.0

From the following two IP Addresses:
69.19.**.** - Hughes Network Systems
131.151.***.** - University of Missouri-Rolla

The original user agent for all requests was:
Mozilla/4.0+(compatible;+MSIE+6.0;+America+Online+Browser+1.1;+Windows+NT+5.1;+{A95FC160-E6BB-8534-E015-367923AB513F})
(sorry for blowing-out the right margin)

But when it grabbed the favicon.ico from each of my sites it switched to the OCP HRS 1.0 user agent.

So I suspect it's an image bot of some kind. A search didn't turn up anything meaningful other than it's in a lot of people's log files.

Has anyone else seen OCP HRS 1.0?

Thanks.

[edited by: volatilegx at 4:46 am (utc) on July 18, 2005]
[edit reason] obscured IP addresses [/edit]

[wilderness]

Mozilla/4.0+(compatible;+MSIE+6.0;+America+Online+Browser+1.1;+Windows+NT+5.1;+{A95FC160-E6BB-8534-E015-367923AB513F})

This UA and others that use the multiple +'s are fake UA's.

The line below seems to solve the issue:

SetEnvIf User-Agent \+NT\+ keep_out

[GaryK]

Yes, I know that user agent is spoofed. :)

I was asking about OCP HRS 1.0 which seems to be an image bot but I can't prove it; at least not yet. ;)