http: user-agent = mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; .net clr 1.0.3
This is a strange one. The useragent has http: and user-agent = in it its clearly an atempt to fake a useragent.
Stranger is that the IP is a MS IP. Making it look more and more like MS IPs are being used to send spam.
Adding this check phrase to UA-Anywhere ban list.
user-agent =,unknown bot