it was over 6 months ago, the IP was in 82 range, cant remember, i still have the file around some where, they thought they were funny by leaving anon news submission, what they did not know was that nuke time stamped it, that was all i needed by looking for the news submit link during that time in the raw access logs, it was a perfict hit, the IP never scanned any OFP players or thier ranges, so I left it at that and blocked the ISP range, it may have been a bounced IP who knows