Under Web-Application and API Security (WAAS) bot protection, two bot categories that belong to unknown bots are web scrapers and HTTP libraries. Web scrapers are automated agents that collect data from websites without permission, fitting the definition of a bot whose intent may not be clear. HTTP libraries are tools and scripts that can be used to make automated web requests, often bypassing traditional methods of identifying legitimate bots like search engine crawlers or news bots.