Swapdrive Norton

[wilderness]

Not sure what this, however don't believe it has anything to do with their AV software.

Symantec Corp Swapdrive Norton Data Services QWEST-IAD-SCSNDS10 67.134.208.128 - 67.134.208.255
67.134.208.128/25

67.134.208.134 - - [02/Jun/2013:11:45:29 -0600] "GET /NyFolder/MySub/MyPage.html HTTP/1.1" 200 18975 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13"

QWEST-IAD-SCSNDS1 63.146.183.64 - 63.146.183.71 63.146.183.64/29
WEST-IAD-SCSNDS2 63.146.183.72 - 63.146.183.79 63.146.183.72/29
QWEST-IAD-SCSNDS3 63.146.183.80 - 63.146.183.95 63.146.183.80/28
QWEST-IAD-SCSNDS4 63.146.183.96 - 63.146.183.127 63.146.183.96/27
QWEST-IAD-SCSNDS7 63.236.107.176 - 63.236.107.191 63.236.107.176/28
QWEST-IAD-SCSNDS10 67.134.208.128 - 67.134.208.255 67.134.208.128/25

FWIW, this (MyPage) has been quite active over the past few days.

[dstiles]

Thanks for the headsup. I found only that one IP in the range in my database but it had acquired 33 hits since November 2011, the last one yesterday. Now permanently blocked (previously blocked by headers).

I found a few results at ixquick for the phrase (in quotes) "Symantec Corp Swapdrive Norton Data Services". Looks like some kind of AV site check check but I suppose it could be a fake registration (ie not Norton at all).