obot

anyone know german?

[CuriousWeb]

just spotted this in my logs

213.252.152.11 - - [25/Oct/2002:20:50:29 +0100] "GET /robots.txt HTTP/1.1" 200 661 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; obot)"

IP goes to a website called NetCOM Kassel which is German

Anyone know anything about this bot?

[jdMorgan]

CuriousWeb,

I don't know much about that one, but it's been around a while. Since it fetched robots.txt, please let us know if it doesn't obey it.

Jim

[heini]

It's been out for a while, I believe. Coming from a smaller german ISP. Wonder if it's a private bot...perhaps some student from the Kassel University?

[CuriousWeb]

Just grabbed robots.txt so far but will probably return at some point so will report misbehaviour (if any) here..

[nancyb]

just discovered this in my logs, too. Between yesterday and today it has grabbed every image on my site twice and nothing else. Did not ask for robots.txt!

I just finished renaming a lot of my image files so he got lots of 404's today.

[carfac]

Hi:

I have had obot on my deny for a while, but did not have a proper UA, thanks for the info!

dave

[carfac]

Hi:

As I was updating my ban file, I thought that to just ban "obot" MIGHT cause some problems...

so, I am banning: "\ Obot" to make sure I don't ban someone like riobot or soimething else by mistake.

(I made up that UA, there is no riobot.... but you see my point!)

dave

[nancyb]

still learning here -

this is what it looks like in my logs
213.252.152.10 - - [24/Oct/2002:14:17:30 -0500] "GET /images/filename.jpg HTTP/1.1" 200 5040 "-" "oBot"

why does it just show oBot and the case is different or is this a different bot?

[carfac]

nancyb:

It would appear to me that these are two different UA's. Maybe different versions of the same UA, or maybe a popular name. The one you have is the one I had blocked. When I saw the above UA, I changed the block to "\ obot"... but now I added back in the original "^obot$"

dave

[Josk]

Thats interesting...I had a "oBot" come in from 195.127.134.66 last month... Now thats from NetCom Kassel, also in .de. After looking a bit more I had the "Mozilla...etc" ua also from 195.127.134.66.

Its also come from 213.252.152.11, 213.252.152.12, 213.252.152.13 and 213.252.152.21.