Powermarks

[TorontoBoy]

UA: Mozilla/4.0 (compatible; Powermarks/3.5; Windows 95/98/2000/NT)
Protocol: HTTP/1.1
Robots.txt: No

Seems related [webmasterworld.com...] but this bookmark manager UA is doing some odd stuff, possibly repurposed name. Content post spammed me twice, and then did some referrer spam, all from different IP ranges. Overall, suspicious.

185.219.80.** referrer spam from awesomescreens.com
185.219.80.0/24
ON-LINE DATA NL, Victoria, Mahe, Seychelles
host: zuhause.gdn

184.22.57.*** content post spam
184.22.0.0 - 184.22.63.255
AIS Network Management Center, Th
Host: nat.cwdc-cgn03.myaisfibre.com.

117.181.196.** content post spam
117.180.0.0/14
China Mobile communications corporation, Beijing
Host: none

[edited by: keyplyr at 1:48 am (utc) on Jun 2, 2018]
[edit reason] obscured private IP address [/edit]

[keyplyr]

Powermarks allows users to avoid the entire folder and hierarchy system, yet still create, find, and browse large collections of bookmarks... It includes notes, descriptions, and keyword fields for each bookmark... It also has intelligent Web page status checking, proxy and HTTP 1.1 support

So it is crawling sites to find bookmarks - not cool.

Wouldn't want it on my Windows machine, but doesn't appear to be anything malicious to websites, even though it's reported not obey to robots.txt.

I usually ignore log spam unless it becomes a problem.

[TorontoBoy]

The bot did leave post spam on my sites, so it is not so benign. The referrer spam I can ban.

[keyplyr]

It could be a fake UA a bot is using, running from a few compromised IPs.

Blocking that UA could be blocking innocent users with that bookmaker installed.