probably not from Yandex

[lucy24]

UA: Mozilla/5.0 (compatible; YandexAntivirus/2.0; +http://yandex.com/bots)
IP: not Yandex

Their web page--written by someone who apparently knows English--
[yandex.com...]
does not list this UA. Could it be a browser add-on? I met it from a Russian non-Yandex range; visitor appeared to be human.

[keyplyr]

...or someone using YandexAntivirus extension on their browser.

[yandex.com...]

I met it from a Russian non-Yandex range; visitor appeared to be human

Many Russians are.

IP: not Yandex

What is it?

[lucy24]

What is it?

::shuffling papers::
46.188.90.abc. It's in Russia.

someone using YandexAntivirus extension on their browser

Is it described on the page? I couldn't find it.

[keyplyr]

Not explicitly.

Now that I've run the IP, here's what I think.

2com.ru or com2com.ru is a server farm:

46.188.0.0 - 46.188.127.255
46.188.0.0/17

As such, it is a candidate for blocking - but - that doesn't explain the UA, which could be a hoax or it could be a security type bot belonging to Yandex, but using a leased range not registered appropriately.

So we're just a little better off than we were before, or at least I am... you're about the same :)

[keyplyr]

Some of this range seems to be broadband. I'm seeing FB referrals.