{"schema_version":"newruntime-reader-dossiers-v1","type":"reader_dossier","id":"reader:infrawatch","slug":"infrawatch","name":"Infrawatch","kind":"scanner","kind_label":"Scanners & probes","operator":{"name":"Infrawatch Limited","url":"https://infrawat.ch/"},"docs_url":"https://infrawat.ch/","robots_tokens":[],"purpose":"UK internet-measurement and security-research scanner that routinely observes publicly exposed hosts and services; says it does not exploit or brute-force.","feeds":["security_scan","research"],"respects_robots":"unknown","robots_note":"Opt-out by email (opt-out@infrawat.ch) with proof of network control; no robots.txt statement.","verification":{"method":"none_published","url":null},"why_it_matters":{"text":"Infrastructure scanning, not readership; exclude from audience counts.","kind":"new_runtime_interpretation"},"confidence":"medium","researched_at":"2026-10-23","sources":["https://infrawat.ch/"],"icon_url":"https://newruntime.com/readers/icons/infrawatch.png","matching":{"aliases":["infrawatch"],"rule":"Reduce each agent_days label to a token: for labels starting with Mozilla/ take the product after 'compatible;', else a versioned crawler token such as 'FooBot/1.0' (a truncated 'Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile' prefix logged before 23 Oct 2026 is PetalBot; anything else is unidentified-android, unidentified-linux-chrome or unidentified-browser); otherwise take the text before the first '/', '(' or ';' and drop a trailing ' token probe'. Lowercase it. A dossier owns the tokens in its aliases."},"observed_baseline":{"as_of":"2026-10-23T08:01:01.990Z","window_first_day":"2026-07-23","window_last_day":"2026-10-23","observed_days":93,"note":"Refreshed daily in production from the live aggregates (dated by as_of). For current numbers aggregate live_sources.history agent_days by matching.aliases.","total_requests":195,"first_seen":"2026-07-25T06:18:44.544Z","last_seen":"2026-10-22T13:15:19.250Z","days_active":33,"recency":"returning","categories":["scanner"],"label_variants":1,"journeys":null},"identity_note":"A family name is what a client claims in its user agent. It is verified only when its request came from the operator's published IP ranges or passed forward-confirmed reverse DNS, as reported per family in /crawler-journeys.json. Anyone can claim any name.","privacy":{"scope":"family-level aggregates only","ip_addresses":"not_output","raw_user_agents":"not_output (labels are sanitized; URLs inside them are redacted)","visitor_ids":"not_output","query_strings":"not_output"},"live_sources":{"history":"https://newruntime.com/bot-traffic-history.json","latest":"https://newruntime.com/bot-traffic-latest.json","machine_consumption":"https://newruntime.com/machine-consumption.json","crawler_journeys":"https://newruntime.com/crawler-journeys.json"},"routes":{"html":"https://newruntime.com/readers/infrawatch/","markdown":"https://newruntime.com/readers/infrawatch.md","json":"https://newruntime.com/readers/infrawatch.json","index":"https://newruntime.com/readers.json","index_html":"https://newruntime.com/readers/"}}