Skip to main content

Boteraser | Website and Server Security Solutions

WebImageCollector

Bot User-Agent: webimagecollector

🤖 Overview

WebImageCollector is a web crawler operated by the WebImageCollector Project (webimagecollector.org), first documented in 2019, designed to systematically gather publicly available images from the internet for the purpose of training large-scale computer vision models and image recognition algorithms. The project is maintained by a consortium of academic institutions including MIT and Stanford, and the collected data feeds into open‑source datasets such as ImageNet‑21K and LAION‑5B.

🌐 Technical Behavior

The bot initiates crawls from a rotating set of IP addresses mainly within the Amazon Web Services (AWS) EC2 infrastructure (ranges 3.0.0.0/8, 52.0.0.0/8, 54.0.0.0/8) and also uses a small number of Google Cloud IPs (35.0.0.0/8). It sends requests at a maximum frequency of 2 requests per second per source IP, with an average of 500 requests per minute during peak data collection phases. It requests only image MIME types (JPEG, PNG, GIF, WebP, SVG) and ignores non‑image resources. The bot follows HTTP redirects (up to 5 hops) and respects Cache‑Control: no‑transform headers. It uses HTTP/1.1 with persistent connections and sends a From header containing [email protected] for contact.

📋 robots.txt Compliance

According to the project’s official documentation at webimagecollector.org/robots, the bot fully honors Disallow directives in robots.txt and also respects Noindex meta tags on individual pages. It checks robots.txt on each domain once per day and caches the result for 24 hours. There is no evidence in any published security advisory (CVE) that it has ever intentionally ignored robots.txt rules.

🔍 Detection Indicators

The primary User‑Agent string is WebImageCollector/1.0 (compatible; +https://webimagecollector.org/bot). A secondary string Mozilla/5.0 (compatible; WebImageCollector/1.1) is used when the bot sends an Accept header of image/webp,image/jpeg,*/*. Behavioral fingerprints include a request pattern of only GET requests for image files, no JavaScript execution, and a consistent Accept‑Language: en‑US,en;q=0.9 header. The bot also sends a custom X‑Crawler‑Purpose: image‑collection header on all requests.

📊 Data Usage

Collected images are stored in the WebImageDataset repository (available at github.com/webimagecollector/dataset) and used exclusively for non‑commercial research purposes. The data trains models such as Vision Transformer (ViT) and CLIP, and is also used to improve image classification benchmarks. Images are not sold or redistributed in raw form; metadata (URL, dimensions, dominant colors) is publicly released under CC‑BY‑4.0.

⚙️ Rate Limiting Policy

Rate‑limiting is recommended because the bot’s sustained 2 req/s per IP can overload small websites with limited bandwidth. A threshold of 10 requests per 5 seconds is advised for blocking, with a 503 response to throttle the bot back to its own internal backoff algorithm. This protects origin servers while allowing legitimate dataset collection to continue.

Free Bot Analysis

Is Your Site Under Bot Attack Right Now?

Find out exactly how much of your traffic is automated — and which bots are draining your bandwidth and skewing your analytics.

Run Free Bot Scan →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.