Grafix-is

[keyplyr]

81.30.76.232 Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; nl-nl) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16

GFX-CAP-PRONATION, Netherlands
81.30.76.128 - 81.30.76.255
81.30.76.128/25

robots.txt: no
rDNS: no

requested a half-dozen html files only

[Pfui]

Back on 09-04, the same IP flew its true flag:

81.30.76.232
Mozilla/5.0 (compatible; DomainRatio Website Index/1.2.46; +http://www.domainratio.com)

robots.txt? NO

Project Honey Pot info for 81.30.76.23 shows both UAs thus far. [projecthoneypot.org...]

The UA's IP is a neighbor, 81.30.76.214, and the whole bunch is block-worthy.

[dstiles]

Bot hit today and range 81.30.64.0 - 81.30.79.255 blocked around 18:30 BST

[keyplyr]

Guess I need to broaden the block to: 81.30.64.0/20

[Pfui]

I just encountered the DomainRatio UA-IPs so I'm surprised by the size of the block. Bad history with the Grafix/Pronation/Datahouse server farm(s)?

[dstiles]

Hadn't seen the 81.30.64/20 range before yesterday. May have seen the UAs before but I seldom pay much attention unless they are being troublesome.