spatineo-serval-controller
Spatineo Serval Controller is an automated crawler operated by Spatineo Oy, a Finnish geospatial technology company founded in 2009 and headquartered in Helsinki. The bot is a core component of the Spatineo Monitoring and Alerting platform, designed to periodically harvest metadata and availability metrics from OGC Web Services — including WMS, WMTS, WFS, and WCS — as well as Esri ArcGIS REST endpoints and Tiled Map Services. Its primary purpose is to provide real-time performance monitoring, uptime tracking, and capability document parsing for geospatial data providers worldwide. The collected data feeds into Spatineo’s public dashboard and private alerts, enabling operators to detect service degradation or misconfiguration.
The Serval Controller employs a scheduled, IP-based crawling strategy that targets specific service endpoints defined by Spatineo’s registry. It issues HTTP GET requests to the base URLs of known map services, typically appending standard parameters such as request=GetCapabilities for OGC services. Crawl frequency is configurable per endpoint but defaults to once every 15 to 30 minutes for active monitoring, making it more aggressive than typical search engine bots. The bot uses IPv4 addresses drawn from ASN 201845 (Spatineo Oy) and a smaller secondary range registered to the company. All requests originate from Helsinki, Finland, with a reverse DNS suffix of .spatineo.com. The bot supports both HTTP/1.1 and HTTP/2 protocols and includes a Accept: application/xml header to retrieve XML-based capability documents.
Based on Spatineo’s official documentation at spatineo.com/serval-controller/robots-policy/, the Serval Controller fully respects robots.txt directives. It parses the file before each crawl cycle and will not access any path explicitly disallowed under the User-agent: Spatineo Serval Controller rule. Additionally, the bot observes the Crawl-delay directive if present, throttling requests accordingly. Spatineo states that the controller checks for updates to robots.txt at least once every 24 hours.
The primary User-Agent string is Spatineo Serval Controller/2.0 (with version numbers varying between 1.0 and 2.0), though Spatineo also registers the generic SpatineoBot as an alternative. Behavioral fingerprints include repeated requests to the same endpoint at regular sub-hour intervals, a From header containing [email protected], and a User-Agent string that always includes the word “Spatineo”. No Referer or Cookie headers are sent. These characteristics allow web administrators to identify the bot in access logs without ambiguity.
All data collected by the Serval Controller is used exclusively for Spatineo’s Cloud Monitoring Service, which generates uptime percentages, response time averages, and error rate statistics for each monitored geospatial service. Spatineo does not store or repurpose the full capability documents for any AI training or advertising; data retention is limited to aggregated metrics for a rolling 90-day window. The results are displayed on Spatineo’s public status pages and can be integrated into third-party monitoring tools via REST API.
Rate limiting is recommended because the Serval Controller polls endpoints as frequently as every 15 minutes, which can significantly increase server load if many services are monitored simultaneously. Spatineo advises operators to implement threshold-based blocking — for example, allowing no more than 100 requests per minute per IP — but emphasizes that the bot is legitimate and should not be completely blocked, as it provides valuable uptime visibility for geospatial data providers.
Similar Threats
Free Traffic Analysis
Discover which unwanted bots are being blocked on your site, how often they hit, and where they come from — real data from your own traffic, not guesswork.
🔍 Scan My Site FreePowered by JA4 fingerprinting, honeypot traps & behavioral analysis
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
Stay up to date with the latest from Boteraser.
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
Service URL: developers.cloudflare.com (opens in a new window)
These cookies are needed for adding comments on this website.
These cookies are used for managing login functionality on this website.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.