infomine.ucr.edu

at apnic ip?

[bull]

203.199.84.66 - - [01/Nov/2003:14:08:59 +0100] "GET / HTTP/1.0" 200 2118 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:09:19 +0100] "GET /start.html HTTP/1.0" 200 621 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:09:32 +0100] "GET /starte.html HTTP/1.0" 200 625 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:09:59 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:11:17 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:11:39 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:11:56 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:12:09 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"
203.199.84.66 - - [01/Nov/2003:14:12:26 +0100] "GET /robots.txt HTTP/1.0" 200 1029 www.-.net "-" "infomine.ucr.edu" "-"

Because there is plenty of information on legit infomine crawlers that all have different UA strings than this one that just visited my site I ask the community if anyone had similar things and/or knows if this one is legitimiate. IP is somewhere in india on a leased line.

[BlueSky]

I don't think the IP matters. The University of California has made their virtual library software available as a free download on their site. So, users can be located anywhere in the world. Since the software is open source GPL, the user can easily modify the UA string to whatever he/she wants. The last release was in July 2003. This might be the new default UA string. Didn't feel like downloading it to see for sure.

Personally, I don't have any tolerance right now for bots from India or China since most of my hit and run attackers have been from those two countries.

[bull]

Since the software is open source GPL

Oh that seems to explain it, thanks BlueSky!
Blocked.

[bull]

In the meanwhile my question to ucr.edu was answered (quoting from the email):

Conclusion: I'm not sure what is going on at the other site, but it is not us doing the crawling (in this instance, at least). Any blocks on the IOP range about do not affect us.

Unfortunately they got not everything right in their response, thought that

infomine.ucr.edu

was there referer, but it is the UA.

[plasma]

I had a visit from 203.199.124.xxx
UA: GoogleBot

Google for sure isn't GPLed ;)

[plasma]

It came regulary (daily) though 28/Oct/2003 - 31/Oct/2003
It got the index page from w/o www and was redirected to 301

First I thought: OK, someone is playing with the referer.
But it behaved like a bot and came every 24h.

Strangely it stopped at 31/Oct/2003
01/Nov/2003 directory.mozilla.org (DMOZ) crawled us again.

Coincidence?