On Thu, Feb 24, 2000 at 01:11:09PM -0500, Tim Hamel wrote:
<snipped>
> this IP which suggests it's not a normal user. Whoever it is, they're most
> likely running Linux.

I'm curious as to what brought you to this conclusion.  If you look
at the reports that were posted ...

SUBJECT:ref1 ndxed by141.20.196.74 Mozilla/4.61 [en] (WinNT; U)
DATE:2000/02/23 16:29:06
X-PPEnvelope-To: jamesnewton@piclist.com
http://204.210.50.240/techref/default.asp is being indexed by:
141.20.196.74 of 141.20.196.74
The HTTP request was:
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: de,en
Connection: Keep-Alive
Host: 204.210.50.240
Referer: http://204.210.50.240/techref/default.asp
User-Agent: Mozilla/4.61 [en] (WinNT; U)
Accept-Encoding: gzip
Accept-Charset: iso-8859-1,*,utf-8
http://spamcop.net/sc?action=trackhost&host=141.20.196.74

... specifically the fourth to last line it says WinNT.  The
other reports the offender was using Offline Eplorer, which is
a Win9x/NT automated downloader.  So it looks to me as if the
offender was running NT, not Linux.
--
Mike Werner  KA8YSD           |  "Where do you want to go today?"
ICQ# 12934898                 |  "As far from Redmond as possible!"
'91 GS500E                    |
Morgantown WV                 |  Only dead fish go with the flow.