Forum Moderators: open

Message Too Old, No Replies

"'Mozilla/5.0 and "=Mozilla/5.0

         

not2easy

6:32 am on Jun 16, 2016 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



I thought I had seen a previous discussion around here about these odd UA syntax things but searches and pages of looking doesn't pull them up so - is anyone else seeing these things recently? The entire UA is
"=Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16"
coming from Paramount Technology PARAMOUNT which is within Frontline Data Services, Inc VORTECH:
216.81.64.0 - 216.81.71.255
216.81.64.0/21

That same UA is coming in from Webhosting.Net:
67.215.160.0 - 67.215.191.255
67.215.160.0/19

The other weirdo is:
"'Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)'"

Coming in from INAP-SJE-PALOALTOTECHOPS:
64.74.215.0 - 64.74.215.255
64.74.215.0/24

Mostly looking for assorted vulnerabilities. Obvious bots, 403s mean "keep trying".

keyplyr

7:14 am on Jun 16, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



The "odd UA syntax things" are usually to interfere with rewrites to block 'em.

I've seen that UA occasionally for several years, but not lately. BTW I have those ranges blocked.

lucy24

4:39 pm on Jun 16, 2016 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



BrowserMatch ^\W bad_agent