If you've seen EchelonGraphBot in your logs, here's exactly what it does and how to block ithttps://www.reddit.com/r/netsec/comments/1wfo4pc/if_youve_seen_echelongraphbot_in_your_logs_heres
We run a crawler that checks how public websites are set up. Things like whether HTTPS is enforced, when the certificate expires, which TLS version is offered, what security headers are set, how cookies are flagged, and where redirects go. If it has been hitting your servers, you probably want to know what it is. So we wrote the whole thing down on one page: echelongraph.io/bot It covers how often it visits a single host, how it handles robots.txt and Retry-After, which address it comes from, what it will never do, and how to opt out with a DNS record. No signup, no popup. Two notes on the op…