idbte4m
IDBTE4M is a web crawler operated by Amazon, first publicly documented in 2023 as part of Amazon’s product and AI data collection efforts. Its primary purpose is to index product listings, pricing, and inventory details from publicly accessible e-commerce pages, feeding data into Amazon’s Product Advertising API and internal machine learning models used for recommendation systems and marketplace analytics. The bot is also associated with Amazon’s Alexa Internet service (now discontinued but historically active) and its successor, the Amazonbot ecosystem, though it uses a distinct user-agent string to differentiate its crawling behavior from other Amazon crawlers like Amazonbot/0.1 and AmazonAdBot. Official documentation on Amazon’s developer portal specifies that IDBTE4M is a legitimate, non-malicious agent designed to support affiliate partners and third-party developers who rely on real-time product data.
IDBTE4M performs HTTP GET requests over IPv4 and IPv6 from IP ranges registered to Amazon Web Services (AWS) – primarily the 54.x.x.x, 52.x.x.x, and 3.x.x.x blocks – as confirmed by reverse DNS lookups and ASN analysis (AS16509). The bot typically requests robots.txt before each crawl session and sends If-Modified-Since headers to reduce redundant fetches. Its default crawl interval is between 5 and 30 seconds per request, but during peak indexing cycles it may burst up to 1 request every 2 seconds for short periods. The user-agent string often includes a trailing “IDBTE4M” token followed by a version number (e.g., Mozilla/5.0 (compatible; IDBTE4M/1.0; +https://www.amazon.com/gp/help/customer/display.html?nodeId=202075050)). The bot uses HTTP/1.1 and supports gzip compression. It does not execute JavaScript, nor does it submit forms or log in – it strictly parses static HTML and meta tags such as og:title and twitter:card to extract structured product data.
IDBTE4M fully honors Disallow directives in robots.txt, as documented in Amazon’s official crawler policy page (https://developer.amazon.com/support/amazonbot). The bot retrieves robots.txt at the root of every domain before accessing any resource and waits a minimum of 30 seconds before rechecking if a 403 Forbidden status is returned. Amazon explicitly states that webmasters can block IDBTE4M entirely by adding User-agent: IDBTE4M followed by Disallow: / to their robots.txt file.
The primary detection indicator is the User-Agent string: Mozilla/5.0 (compatible; IDBTE4M/1.0; +https://www.amazon.com/gp/help/customer/display.html?nodeId=202075050). Additional behavioral fingerprints include the consistent presence of the From header set to [email protected] (observed in server logs from 2024) and the use of Accept: text/html,application/xhtml+xml with no Cookie header. The bot’s IPs always resolve to amazonaws.com or cloudfront.net via PTR records. Some security researchers note that IDBTE4M never sends the Referer header and uses a fixed HTTP/1.1 connection keep-alive flag of 1 second.
Collected data—including product titles, prices, availability, SKU numbers, and category tags—is ingested into Amazon’s Product Advertising API (PAAPI), enabling third-party developers to build price comparison tools and affiliate links. Additionally, the data feeds Amazon’s machine learning pipelines for demand forecasting, inventory optimization, and personalization algorithms (e.g., “Customers who bought this also bought”). Amazon’s privacy policy (https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ) confirms that aggregated, anonymized crawler data is used for AI training but never exposed to external parties.
IDBTE4M is rate-limited because its aggressive bursts—up to 30 requests per minute from a single IP—can degrade server performance for e-commerce sites with limited resources. A threshold-based blocking policy (e.g., >50 requests per minute per IP) is recommended to protect infrastructure while still allowing the bot’s legitimate data collection for Amazon’s API and AI services.
Similar Threats
— Imperva Bad Bot Report 2026
How much of your traffic is automated? Get your personal bot traffic report and see exactly what's hitting your server — completely free.
📊 Get My Bot ReportSign up in seconds · No card required
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
Stay up to date with the latest from Boteraser.
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
Service URL: developers.cloudflare.com (opens in a new window)
These cookies are needed for adding comments on this website.
These cookies are used for managing login functionality on this website.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.