Skip to main content

Boteraser | Website and Server Security Solutions

iron33

Bot User-Agent: iron33

🤖 Overview

Iron33 is a web crawler operated by IronSource, a mobile advertising and app monetization platform acquired by Unity Technologies in 2022. Its primary purpose is to collect publicly available metadata, ratings, reviews, and pricing information from mobile app stores such as Google Play and the Apple App Store to feed into IronSource’s analytics and optimization products, including their app intelligence dashboards. The bot is documented in IronSource’s official developer resources and is listed among known crawlers on their support pages.

🌐 Technical Behavior

The Iron33 crawler performs HTTP GET requests over IPv4 and IPv6, targeting app store front-ends and developer API endpoints. It respects standard HTTP status codes and retries on 429 (Too Many Requests) and 5xx errors. Crawl frequency is aggressive, with typical request intervals of 2–5 seconds per domain, but it can scale up to hundreds of requests per minute when indexing large app catalogs. The IP ranges used by Iron33 are allocated to IronSource’s infrastructure, primarily from netblocks owned by the company (e.g., ASN AS396628 for IronSource Inc.) and also from cloud providers like AWS where IronSource deploys its crawler fleet. It identifies itself via the User-Agent string Iron33/1.0 (though variations exist) and does not obfuscate its origin.

📋 robots.txt Compliance

Based on IronSource’s published documentation and observed behavior, the Iron33 crawler explicitly honors Disallow directives in robots.txt. IronSource states on their help portal that their crawlers will respect robots.txt rules. Security advisories and community reports confirm that the bot has been seen complying with rate-limiting suggestions in robots.txt. However, there are occasional reports of the bot ignoring Crawl-Delay directives, though IronSource officially supports them.

🔍 Detection Indicators

The primary detection method is the User-Agent string Iron33/1.0 or Iron33 (compatible; +https://www.ironsrc.com/crawler). Additional identifying headers include From: [email protected] and a custom X-IronSource-Crawler: 1 header. The bot also has a distinctive pattern of requesting /robots.txt first, then following with requests to app store URLs with high frequency. Logs often show a steady stream of requests from a limited set of IPs within IronSource’s AS.

📊 Data Usage

Data collected by Iron33 is used to populate IronSource’s app intelligence products, including competitive analysis dashboards, keyword tracking, and ad monetization insights. The crawled app store metadata is aggregated and presented to developers and marketers through IronSource’s App Analytics platform. IronSource also uses this data internally to improve ad targeting and to provide market trend reports. The data is not used for AI model training in the style of large language models, but for structured analytics and business intelligence.

⚙️ Rate Limiting Policy

Due to its high request frequency and wide scanning patterns, webmasters often rate-limit Iron33 to prevent server load. IronSource recommends a polite crawl delay in robots.txt and acknowledges that aggressive rate limiting may be necessary for sites with limited bandwidth. The rationale for threshold-based blocking is to maintain service reliability while allowing the legitimate crawler to access essential app store data without overwhelming the origin servers.

Free Traffic Analysis

What's Actually Crawling Your Website?

Discover which unwanted bots are being blocked on your site, how often they hit, and where they come from — real data from your own traffic, not guesswork.

🔍 Scan My Site Free

Powered by JA4 fingerprinting, honeypot traps & behavioral analysis

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

✓