VeriSign

[wilderness]

69.36.158.** - - [17/Nov/2007:01:36:24 -0600] "GET /robots.txt HTTP/1.1" 403 - "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12; ips-agent) Gecko/20050922 Fedora/1.0.7-1.1.fc4 Firefox/1.0.7"

Fairly large Class C for this use.

[edited by: volatilegx at 3:23 am (utc) on Nov. 19, 2007]
[edit reason] obfuscated ip address [/edit]

[balam]

A year ago the UA was...

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050922 Fedora/1.0.7-1.1.fc4 Firefox/1.0.7

The ips-agent part of the UA only started appearing in mid-October. It was at that time that Verisign started using 69.36.158.*. Before that, they were visiting from 208.17.184.*.

Interesting: I've only seen Verisign visiting .net sites...

[thetrasher]

Obeys robots.txt

I've only seen Verisign visiting .net sites...

.net and .com

[balam]

> .net and .com

I stand corrected and can confirm as well. I found an early September visit from them on a .com honeypot site.

Many thanks for the correction, thetrasher!