Odd User Agent.

Java?

[Gibble]

We keep seeing visitors on the website with the following user agent
HTTP_USER_AGENT = Java/1.6.0_03

...the version changes, but they keep appearing in the logs. Where is this coming from? Who/What is this?

Thanks
-C

[wilderness]

It's not a sound practive to focus on different versions of the Java UA, rather "Java" period.

Haven't a clue who they are or what their up to, however "most" have "Java, ANY" denied since the inception of denial.

You don't provide an IP range and where it me and the visitor and UA appeared too frequently?
I'd consider denying the IP range as well.

Don

[blend27]

i'd say 99% of the time the ip with that UA is already in projecthoneypot or will be there with in couple of days and marked as [spam harvester]