Ntt

[wilderness]

Just a heads up.

128.241.20.** - - [06/Jan/2007:18:43:19 -0800] "GET /MyFolder/MyPage.html HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
24.127.193.** - - [06/Jan/2007:18:43:19 -0800] "GET /SameFolder/SamePage.html HTTP/1.1" 200 10671 "Google on-topic search" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6"

Although there doesn't seem to be any reason for paranoia with this particular visitor that visits ocassionally.

NO crawls.

I just don't care for visitors that have the ability to change IP's, UA's and possibly machines and/or OS instantaneously.

Added to my "snoop" list.

Don

[jdMorgan]

WordTracker has been know to inhabit that region, and changes user-agents.

Jim

[wilderness]

WordTracker has been know to inhabit that region, and changes user-agents.

Golly gee Jim; many thanks.
Now I'll have to take an extra tranquilzer and consult my doctor for a stronger medication for my schizophrenia ;)

Don

[jdMorgan]

Well, not so fast on the tranqes, there... I've never seen WT from exactly that address range, but since WT *is* schizophrenic about it's UA, it just rang a bell (and ya know, Pavlov, I started salivating right away -- Woof!)

I whack the NTT/Verio server ranges (among others), and that amuses me because I *use* NTT/Verio servers (among others). :)

Jim

[incrediBILL]

Why should your server range be any safer than anyone else's?

I block MY server range and it's relatively been quiet with only a scraper or two until recently a few dedicated boxes were involved in the botnet attack on one of my servers.

[hybrid6studios]

I agree...I don't like visitors who can switch identities at the drop of a hat like that either. More than once it's been a hacker attempt.