Ocp

[wilderness]

This must be some new kind of icon grabber.
A google was futile.
Same IP for two days now.

24.151.14.xx - - [28/Aug/2005:06:14:33 -0700] "GET /favicon.ico HTTP/1.1" 403 - "-" "OCP HRS 1.0"

[GaryK]

Here are the notes I have for this user agent:

The original user agent for all requests was:

Mozilla/4.0+(compatible;+MSIE+6.0;+America+Online+Browser+1.1;+Windows+NT+5.1;+{A95FC160-E6BB-8534-E015-367923AB513F})

When it grabbed the favicon.ico from each of my sites it switched to the OCP HRS 1.0 user agent. So I suspect it's an image bot of some kind. A search didn't turn up anything meaningful other than it's in a lot of people's log files.

[wilderness]

Thanks Gary.
Your former insight into the former UA expalins why I hadn't seen it previously.

I have these fake UA's with the multiple "+" denied.

Don

[GaryK]

I'm always happy to help. I just wish I had more to offer in this case. But I guess maybe it's enough to know the ua should be banned, eh?