Scooter/3.3

[Key_Master]

IP: 64.152.75.173
User-agent: Scooter/3.3

This spider will occasionally leave a referring URL.

[littleman]

I got -
64.152.75.184
64.152.75.219
..with the same UA, but they didn't leave a referer.

[jdMorgan]

Level3 again... Is there anything in your logs to indicate whether this is AV doing a cloak-busting attempt from a rented IP address, or just someone who copied "Scooter" into his faked UA?

Thanks,
Jim

[PsychoTekk]

got this in my log, unlikely a fake ua:

HTTP_ACCEPT: text/html, text/plain, *
HTTP_CONNECTION: close
HTTP_FROM: mailto:[e-mail]
HTTP_RANGE: bytes=0-131072
HTTP_USER_AGENT: Scooter/3.3
REMOTE_ADDR: 64.152.75.200 [buildrack70.sv.av.com]

[bobriggs]

FWIW, the IP's resolve to:
buildrack92.sv.av.com and
buildrack89.sv.av.com

Doesn't seem to be a fake, more likely rented.

[Key_Master]

64.152.75.173 doesn't reverse resolve although I'm certain this spider belongs to AltaVista. Out of 187 hits it left a referrer 3 times- once to my robots.txt. I don't think it was cloak checking.

[fiestagirl]

I get 64.152.75.184 to resolve to Palo Alto. Looks like there are quite a few Scooters in the group.

[Key_Master]

Nobody else is seeing this IP and agent leaving an occasional referrer? I just got a hit from Scooter/3.3 (64.152.75.173) leaving a referring URL to a Russian p0rn site.

[fiestagirl]

I finally got a chance to check this out and I can say, Yes Key_Master I'm seeing an occasional referrer from this spider. Out of ~26,000 visits checked, I count ~70 referrers.

[martin]

I got valid referers and one from a p* site basic auth, no more info.

All IPs resolve within sv.av.com

[msgraph]

Seeing the same thing Key_master.

Checked some logs from a site that I haven't checked in a week. Scooter came by grabbed the robots.txt and root index page with a referrals from a article on an Independent news site.

[Josk]

So far no refferals, but I had only four Scooter/3.3, mostly Scooter-3.2.SF0. Can I swap spiders with you?

[martin]

>Can I swap spiders with you?

It doesn't send many referers, why do you need it. If it did for all requests it would be nice.

[Key_Master]

Now, I'm getting hits from Scooter/3.3 from 216.39.48.173 (altavista.com).

[martin]

OT: I'm getting referers from Googlebot, all are www.googlebot.com though.

Would be nice if they send real though.

[bobriggs]

Here's another one leaving referer string, I don't think this IP has been mentioned, but it's close to Key_Master's:

ip: 216.39.50.156 (drone7.sv.av.com)
ua: Scooter/3.2.SF0

These are all recently redirected (301) pages, except for the home (root) page. The refering page is the page that it was redirected from (old URL)