Dbrowse 1.4b, RSurf, PEval

what are they?

[Jaf]

Anyone any clues on the following?

DBrowse 1.4b
PBrowse 1.4b
DSurf15a 31
DSurf15a 71
RSurf15a 81
RSurf15a 41
PEval 1.4b
FSurf15a 01

I'm assuming they're all related due to the similar names and the "1.4b" version numbers. Not many hits, and usually from different ISPs, so I'm wondering if this is some browser or plug-in.

It's been driving me nuts (not knowing) for ages!

[Jaf]

Following up my own post, but it seems that these agents are sniffing out feedback forms. Recently I've only seen them accessing a page from which I run a guestbook script, and subsequently I've had posts to the guestbook advertising various sites and services.

I've usually deleted these within hours, and on each occasion they came back 2 or 3 times and reposted.

[Brett_Tabke]

As far as I can tell, those are versions of the infamous auto guestbook signer script running around.

I sure wish the guys running it would knock it off.

[regingsucks]

Spambots.
They're harvesting email addresses. You may notice that they are active for a few seconds of high activity, pause, then resume.
They also totally ignore robots.txt
They tend to follow links like "post" "feedback" "forum" etc.

[Friday]

Possibly a cracker looking for old versions of "formail.pl" to exploit?

[Kev]

I'd come to conclusion they are spambots - just found you guys trying to verify that :)

[threefour]

Anyone see a relation between these user agents and the ones discussed in [webmasterworld.com...]

[HandwovenRug]

threefour:
There must be relations between the "random letter UA's" and the DSurfxxx UA's. Sometimes a DSurfxxx UA is followed or preceeded by some "random letter" UA
from the same IP-Numbers requesting exactly the same
pages.