Windows-Live-Social-Object-Extractor-Engine

[dstiles]

I assume this is some kind of tool run by Windows users for doing more or less what it says. Does anyone have any real information about it, please?

US: Windows-Live-Social-Object-Extractor-Engine/1.0

IP: seen from broadband IP

My server automatically blocks the IP as being an unwanted/unexpected bot.

[wilderness]

Extractor is one of those keywords that should never be used in a UA, nor allowed access.

[dstiles]

Agreed, but I'd still like to know what it actually is/belongs-to. :)

[Pfui]

Might the bot be "Windows Live Messenger"-related?

This just in from a Canadian IP w/ no Honey Pot history. Searching for info about the UA led me 'back' here:)

[06/Aug/2011:09:25:24 -0700] "HEAD / HTTP/1.1" 302 0 "-"
"Windows-Live-Social-Object-Extractor-Engine/1.0"

-- that HEAD hit followed a rewrite to botbait --

[06/Aug/2011:09:25:25 -0700] "HEAD /botbait HTTP/1.1" 200 0 "-"
"Windows-Live-Social-Object-Extractor-Engine/1.0"

-- and that was followed by a GET --

[06/Aug/2011:09:25:27 -0700] "GET / HTTP/1.1" 200 17718 "-"
(UA broken at a space to reduce scroll...)
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729;
Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDC; InfoPath.2; Windows Live Messenger 15.4.3508.1109)"

-- to html only, no auxiliary files.

The IP wasn't redirected to an info page before. It is now. If a real person touches base, I'll see if they recall what they were doing.

[dstiles]

Thanks, Pfui. You could be right.

I can't get HEAD traps so have no idea if that sequence happens or not. I can only view GET/POST hits.