• Anonymous User 14978628

    (@anonymized-14978628)


    Hi,

    I have bots being blocked by Wordfence which have the following as the browser under “Activity Detail”

    Safari version 0.0 running on MacOSX
    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Safari/605.1.15
    Safari version 0.0 running on iOS
    Mozilla/5.0 (iPad; CPU OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1

    Specifically, I am noticing a lack of version number for these bots such as:

    Safari version 0.0

    I’m assuming the above are user agents? And if so is it safe to block any user agent that has Safari version 0.0 and can i do this with Wordfence?

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hi @martychc23,

    That does indeed seem like a fake user-agent.

    You can block that user-agent like this:

    1. Go to Wordfence -> Firewall -> Blocking
    2. Create a Blocking Rule -> Custom Pattern
    3. Type *Safari version 0.0* for the Browser User Agent
    4. Type anything for the Block Reason
    5. Click Block visitors matching this pattern

    For example: https://i.imgur.com/AHzU2bg.png

    Dave

    Thread Starter Anonymous User 14978628

    (@anonymized-14978628)

    Thanks Dave, much appreciated.

    Thread Starter Anonymous User 14978628

    (@anonymized-14978628)

    Hi Dave, I just tested this out to see if i would get blocked but it didn’t work.

    What i’m seeing reported by Wordfence is exactly like this:

    Browser: Chrome version 0.0 running on Win10
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36

    It looks like the first line:

    Browser: Chrome version 0.0 running on Win10

    Isn’t actually part of the user agent which may explain why the block isn’t working.

    Is there anyway around this?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Browser Bot Blocking’ is closed to new replies.