WordPress.org

Ready to get started?Download WordPress

Forums

Centrora Security™
[resolved] Found Malicious User Agent (6 posts)

  1. myerrorsandmysolutions
    Member
    Posted 1 year ago #

    Hi,
    are you sure that Python-urllib/2.7 isn't a search engine spider?
    I received more block e-mail that try to access to my robot.txt page like this:

    TYPE: Found Malicious User Agent
    DETECTED ATTACK VALUE: Python-urllib/2.7
    ACTION: Blocked
    LOGTIME: 2013-05-03 01:24:14
    FROM IP: http://whois.domaintools.com/144.76.62.77
    URI: http://myerrorsandmysolutions.com/robots.txt
    METHOD: GET
    USERAGENT: Python-urllib/2.7
    REFERRER: N/A

    Let me know
    Thank you
    Eclipses

    http://wordpress.org/extend/plugins/ose-firewall/

  2. cherylcope
    Member
    Posted 1 year ago #

    I would like to know the answer to this too!!

  3. Tippy
    Member
    Posted 12 months ago #

    I've got something similar:

    TYPE: Found Malicious User Agent
    DETECTED ATTACK VALUE: Python-urllib/2.5
    ACTION: Blocked
    LOGTIME: 2013-08-02 08:50:42

    Need some answers. Google is no help. All of a sudden I'm getting this, a couple yesterday and 3 today. My site is only 2 months old. One of them had FROM IP: http://whois.domaintools.com/208.66.65.5 this is Technorati that I just got my site approved at. Why am I blocking Technorati?

    Need some info from the PLUGIN AUTHOR or I'll be going back to WordPress Firewall!

  4. Jonathon.Smith
    Member
    Posted 11 months ago #

    Python-urllib is a python module for opening urls

    It probably shouldn't be being blocked. A lot of firewalls block it, because it is used by a lot of not so good visitors, but apparently some valid crawlers are using it as well.

  5. Tippy
    Member
    Posted 11 months ago #

    3 months this post has been up and no reply from the plugin author. Shows you he don't care. Hell with him, I'm going back to WordPress Firewall. WordPress Simple Firewall looks great.

  6. mikeotgaar
    Member
    Posted 10 months ago #

    Jonathon.Smith is correct in saying

    "Python-urllib is a python module for opening urls" and "A lot of firewalls block it, because it is used by a lot of not so good visitors"

    None of the main stream search engines (Google, Bing, etc) use Python-urllib as a user agent.

    Many malicious spiders, including web scrapers and hacker bots, use this ID, hence it's quite common to ban requests when the UA is detected.

    If you want to allow these UA's add " Python-urllib " to the Whitelisted Variables in OSE Settings.

    Personal Opinion: I've never seen any good traffic using these UA's.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic