isc header collector

[Pfui]

gw.den.giac.net
isc header collector [e-mail]

robots.txt? NO

IP: 66.35.45.1 [projecthoneypot.org...]

-- At least three name servers are all .sans.org so this appears to be hailing from in or near its SANS mothership.

-- The SANS Internet Storm Center [isc.sans.edu...] is top-notch. So I'm surprised they'd run an oddly and poorly named, no-robots.txt bot.

-- I don't know why SANS/giac.net ("GIAC provides information security certifications for IT managers and security professionals...") is hitting me, or anybody. The Project Honey Pot link for the IP shows a six-month history.

[dstiles]

Thanks for the info. Never seen that IP range before.

I was going to say internet storm may be checking on the recent use of faked SSL certs but if it goes back 6 months that's not likely.