little-black-box.vmware.com

[Pfui]

little-black-box.vmware.com
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SearchToolbar 1.2; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

robots.txt? NO
IP = 65.113.40.1 [projecthoneypot.org...]

They've run only cloaked UAs on my main site for a while now. The PHP link shows an assortment, including this bot-runner confirmation:

Mozilla/4.0 (compatible; MSIE 4.01; Windows NT; MS Search 5.0 Robot)

If you G "little-black-box.vmware.com" as-is, you'll see it gets around, and that they have multiple problems, intentional or otherwise... A company blurb: "cloud computing with VMware virtualization..." 'Nuff said.

[keyplyr]

I can't tell what range vmware uses inside the Qwest block. Judging from their scope of products, surely more than just 65.113.40.1?

[Pfui]

That's an odd (if not egregious) one in that it also points to -- a Cub Scout pack in So Cal. [robtex.com...]

I'm not a network tracker/figure-outter so here's some FWIW info:

vmware.com proper has one IP (165.193.233.120) and 270-plus same-IP pointers per domaintools (link won't take because of whois. subdomain). Some examples here: [robtex.com...]

[dstiles]

I use robtex quite a bit for tracking down IP potentialities. If you only put in the first 3 values (eg 65.113.40) it will return several (but not all) of the IP settings for that /24. In this case several have the tag vmware. The /24 blocks either side look like ordinary qwest DSL (some/all static).

There are two entries (at least) for 65.113.40.1, which looks like a virtual server. Run on qwest static IPs? Possibly.

vmware itself is cross-platform-enabling software that quite a few people use on (eg) linux to run windows and mac software etc.