Forum Moderators: open
I'm pretty sure this visitor was a bot. One came from the same Australian ISP about two days ago using a Java UA, and ate 403s. I suspect it is the same one trying a new tack.
The ISP seems to have an open proxy, however I can't block their CIDR as I'd be blocking humans too.
I've banned the Squid UA in htaccess, but as they seem rather determined, I'm sure they'll try some different.
[wiki.squid-cache.org...]