yacy-net
YaCy (often referred to as yacy.net) is a decentralized peer-to-peer search engine maintained by the YaCy community and the non-profit YaCy Foundation. Originally created by Michael Christen in 2003, YaCy operates as a free, open-source software project under the GPLv2 license, with its source code hosted on GitHub (github.com/yacy/yacy_search_server). Unlike centralized search engines, each peer independently crawls web pages and shares the resulting index with the network, distributing the workload across thousands of volunteer-operated nodes. The project’s official website at yacy.net provides documentation, downloads, and community forums.
Each YaCy peer uses a Java-based crawler (YaCy Search Server) that respects standard web crawling protocols. Crawling is initiated by user-defined seeds or through the network’s shared crawl requests. The default crawl depth is configurable, typically 3–5 hops, with a crawl delay of at least 500 milliseconds between requests to the same domain (adjustable via the YaCy administrative interface). Peers identify themselves primarily via the User-Agent string YaCy/1.9x (YACY_USER_AGENT) where the version number varies (e.g., 1.92 as of late 2023). IP ranges are unpredictable since each peer runs on a volunteer’s machine or server; common hosting IPs include residential and cloud providers. The crawler uses HTTP/1.1 and performs both GET and HEAD requests. It also supports HTTPS and obey the robots.txt instructions. The network’s distributed nature means request frequency from a single IP is generally low (typically a few requests per minute per domain), but aggregate requests from the entire network can be higher.
YaCy is explicitly designed to honor robots.txt rules. The official documentation at yacy.net/en/robots.html states that the crawler reads the Disallow directives and respects the Crawl-delay directive. By default, YaCy will not crawl URLs that are disallowed. However, individual peer operators may modify the crawler’s code or configuration to ignore robots.txt, though this violates the project’s guidelines. The project also supports the nofollow and noindex meta tags in HTML pages.
The primary detection indicator is the User-Agent string pattern: YaCy/ followed by a version number (e.g., YaCy/1.92). Additional fingerprints include the use of the Accept header text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 and the Accept-Language header set to en or the peer’s locale. The crawler may also include the header X-YaCy-Crawl: yes in some versions. Behavioral fingerprints include low request rates per IP (sub-10 requests per minute per domain) and the absence of JavaScript rendering. The project’s source code (GitHub) allows identification of default timeout values and crawl policies.
Collected data is used to build a shared, distributed search index for the YaCy peer-to-peer network. Each peer stores crawled content in its own database (using Apache Solr/Lucene), and search queries are forwarded to multiple peers that return matching results. The data is not used for commercial AI training or analytics; it solely powers the decentralized search engine. The project emphasizes privacy — no logs are centrally collected, and users can operate their own peer to control their own crawling and indexing.
YaCy is a legitimate, non-malicious crawler, but it may be rate-limited to prevent excessive load on servers, especially when the network has many peers crawling the same domain simultaneously. A reasonable threshold (e.g., 20 requests per minute per IP) is recommended by the community to avoid overwhelming target websites. The rate limit protects the server while still allowing YaCy to function as intended for search indexing.
Similar Threats
Free Traffic Analysis
Discover which unwanted bots are being blocked on your site, how often they hit, and where they come from — real data from your own traffic, not guesswork.
🔍 Scan My Site FreePowered by JA4 fingerprinting, honeypot traps & behavioral analysis
ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the bots listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.
Stay up to date with the latest from Boteraser.
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
Service URL: developers.cloudflare.com (opens in a new window)
These cookies are needed for adding comments on this website.
These cookies are used for managing login functionality on this website.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.