bigpond dot net dot au

bot or end-user?

[cyberdyne]

cpe-121-216-42-***.lnse1.ken.bigpond.net.au
(removed last 3 digits until I know more).
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
===

One of my sites received a lot of bot-like activity from this IP last night. It hit almost every .php file, .css file and second-level directory on my site but called no images or .js, etc.

I thought this was strange considering it had no specific U-A to identify itself as belonging to any particular organisation and it didn't even bother looking at robots.txt. Also, there were no referring URL's whatsoever.

Anyone have any more info on it or it's activity?

Thanks in advance.

[wilderness]

deny from 121

solves this ;)

however bigpound is a major internet provider.

[cyberdyne]

Is this activity common then?

Blocking them would have no effect on the site in question but I may hold off for now and see how it goes.

[Mr Bo Jangles]

bigpond (not bigpound) is THE biggest ISP in Australia - both .net and .com domains

[cyberdyne]

Thanks (coincidence, was just listening to the track of your name!)

Anyhow, I mean the unusual activity, is this something know from this ISP ?

Thanks

[Pfui]

- Check the IP at projecthoneypot.org [projecthoneypot.org...]

Look at the number of type of UAs and whether there are any comments.

- Google the IP (to see if it shows up on anti-spam forums, etc.).

[dstiles]

I have only a few bad IPs from that range, nothing since September, and all single hits from compromised (ie virus'd) computers.

Telstra (bigpond) in general, I have about 160 bad IPs going back a couple of years. Not too bad. I need to keep it open for genealogy lists and contacts.

I block MSIE 7.0b. It's way past beta time and I only see it now as "bot" activity.

[cyberdyne]

Good point, thank you.