Spoofed Googlebot

They didn't quite get the UA and other things right

[Dijkgraaf]

I noticed an interesting thing in my logs, but the following made me think it was not quite wat it was claiming :)

1) It had the User Agent of
Googlebot/2.1 (+http://www.googlebot.com/bot.html; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; (R1 1.5))
however the real Googlebot uses
Googlebot/2.1 (+http://www.google.com/bot.html)

2) Also that googlebot does not usually retrieve images
3) googlebot doesn't give a referer
and 4) the IP address wasn't google's, but it was of the same country domain as the referer string.

Now it could just be someone trying to test their page with a bot user agent, and because there is a hotlinked image on that site (which is allowed by me for this particular image) that I got to see these, so I'm not worried.
Has anyone else seen this particular Agent?

nnn.nnn.nnnnnn- - [17/Jun/2005:01:33:36 +1200] GET /image.gif HTTP/1.1 200 1276 http://www.example.ccTld/dir/page.html Googlebot/2.1 (+http://www.googlebot.com/bot.html; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; (R1 1.5))
nnn.nnn.nnn.nnn - - [17/Jun/2005:01:37:42 +1200] GET /image.gif HTTP/1.1 304 - http://www.example.ccTld/dir/page.html Googlebot/2.1 (+http://www.googlebot.com/bot.html; MSIE 6.0; Windows NT 5.1; SV1; Maxthon; (R1 1.5))

[jdMorgan]

I think the key here is "Maxthon" -- It's a browser extension to IE, if I recall. Maybe it supports UA spoofing.

Jim