New on the banned list
A significant number of fake referrals have been noticed recently coming from a range of IP addresses starting 66.82.9. All of these requests are purporting to be coming from online.music(.com) and feature the User Agent string 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)'
These referrals all seem to be deliberatly requesting pages that don't exist, presumably in the hope of appearing in 404 reports that are published online.
A few older similar referals have been spotted coming from:
12.134.204.22
68.62.15.84
24.17.67.172
213.113.111.188
The user agent in all these cases is 'Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6)' which could easily be the same outfit using an upgraded version. Hopefully blocking the later IPs will be enough for now.