Today I ran into this gem in my log file, a visitor who's IP ends with a Zero! 83.yy.zzz.0
The IP belongs to TELEFONICA DE ESPANA 83.40.201.0 - 83.45.92.255
It was not a bot, it requested styles.css and all images on each page, and overall did not request too many pages or exhibit suspicious behavior.
DamonHD
4:40 pm on May 18, 2008 (gmt 0)
Hi Hobbs,
Because the IP range (subnet) being used is probably bigger than /24 ('class C' as was) there is nothing about the .0 or .255 in that block.
Rgds
Damon
Hobbs
5:33 pm on May 18, 2008 (gmt 0)
Ho Damon, I've never seen network identifier or broadcast addresses used by visitors, very unusual, so you're saying it is legit if the subnet is larger than a class C? Hmmm
DamonHD
8:39 pm on May 18, 2008 (gmt 0)
Hi,
0 and 255 are not special unless in a class C /24 block (or you happen to be at one end or another of a larger block).