nginx-ultimate-bad-bot-blocker
nginx-ultimate-bad-bot-blocker copied to clipboard
Published
20 hours ago •
mitchellkrogza
mitchellkrogza
[User-Agent] Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)
Paste the full User-Agent String here
Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)
Is this for Addition / Removal?
- [X] Addition
- [ ] Removal
- [X] Keep a watch on this one
Did the User-Agent request robots.txt first?
- [ ] Yes
- [X] No
Post Log Excerpt to show User-Agent behavior (10-20 lines is enough)
2600:1003:b025:2bc1:18df:5e61:4fe2:1d6f - - ------.com [23/Jun/2019:07:45:28 +0200] "GET /wp-content/uploads/2010/12/-----.jpg HTTP/2.0" 200 105846 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)" "-"PORT:443 0.039 - . "GZIP:-"
201.185.225.66 - - ------.com [24/Jun/2019:00:03:55 +0200] "GET /wp-content/uploads/2019/04/-----.jpg HTTP/1.1" 200 374325 "-" "Dalvik/2.1.0 (Linux; U; Android 8.0.0; SM-G9350 Build/R16NW)" "-"PORT:443 0.535 - . "GZIP:-"
161.10.100.212 - - ------.com [24/Jun/2019:19:00:56 +0200] "GET /wp-content/uploads/2016/10/-----.jpg HTTP/2.0" 200 350501 "-" "Dalvik/2.1.0 (Linux; U; Android 8.0.0; moto e5 plus Build/OPP27.91-179)" "-"PORT:443 0.423 - . "GZIP:-"
2607:fb90:ae18:fa40:7ff1:82f1:f41f:42b9 - - ------.com [25/Jun/2019:19:35:44 +0200] "GET /wp-content/uploads/2016/10/-----.jpg HTTP/1.1" 200 350501 "-" "Dalvik/2.1.0 (Linux; U; Android 7.0; LGMP260 Build/NRD90U)" "-"PORT:443 0.390 - . "GZIP:-"
84.94.179.236 - - ------.com [26/Jun/2019:15:43:31 +0200] "GET /wp-content/uploads/2013/08/-----.jpg HTTP/1.1" 301 162 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-A505F Build/PPR1.180610.011)" "-"PORT:80 0.000 - . "GZIP:-"
84.94.179.236 - - ------.com [26/Jun/2019:15:43:32 +0200] "GET /wp-content/uploads/2013/08/-----.jpg HTTP/2.0" 200 264601 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-A505F Build/PPR1.180610.011)" "-"PORT:443 0.407 - . "GZIP:-"
178.197.249.36 - - ------.com [27/Jun/2019:12:31:25 +0200] "GET /wp-content/uploads/2016/09/-----.jpg HTTP/1.1" 200 196603 "-" "Dalvik/1.6.0 (Linux; U; Android 4.4.2; SM-T520 Build/KOT49H)" "-"PORT:443 0.200 - . "GZIP:-"
212.5.158.229 - - ------.com [27/Jun/2019:13:24:37 +0200] "GET /wp-content/uploads/2019/06/-----.jpg HTTP/2.0" 200 259319 "-" "Dalvik/2.1.0 (Linux; U; Android 8.1.0; Redmi 6A MIUI/V10.3.3.0.OCBMIXM)" "-"PORT:443 0.476 - . "GZIP:-"
2600:1700:610:f420:5412:6385:2d98:25a6 - - ------.com [27/Jun/2019:14:08:37 +0200] "GET /wp-content/uploads/2013/03/-----.jpg HTTP/2.0" 200 57395 "-" "Dalvik/2.1.0 (Linux; U; Android 6.0.1; SM-G900P Build/MMB29M)" "-"PORT:443 0.000 - . "GZIP:-"
Additional information
Never requests pages only images / photos Could be a background service for another app Needs monitoring
Hello!
Same here, I think
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 503 4691 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 503 4691 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 200 10030 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 503 4691 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 503 4691 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:49 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 200 10025 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:50 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 200 10051 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
5.18.243.58 - - [29/Sep/2019:22:58:50 +0000] "GET /b/xdomi-kameshki-2-pervaya-shkola/ HTTP/1.1" 200 10088 "-" "Dalvik/2.1.0 (Linux; U; Android 5.0.1; K00R Build/LRX22C)"
hits only pages for increase counter of page views ...
According to this https://stackoverflow.com/questions/23804278/browser-sending-dalvik-as-user-agent it's the Android VM in which individual apps run. :thinking:
Stack OverflowAndroid Browsers is sending Dalvik as the user agents in the request headers.I am currently working on a mobile site having a simple login page that validates username and password then authorizes
Some of the UA's I am seeing in my logs.
Dalvik/2.1.0 (Linux; U; Android 5.1.1; SM-J320FN Build/LMY47V)
Dalvik/2.1.0 (Linux; U; Android 5.1.1; HUAWEI Y560-L01 Build/HUAWEIY560-L01)
Dalvik/2.1.0 (Linux; U; Android 8.0.0; SM-G930F Build/R16NW)
Same behavior only requests directly to images
Paste the full User-Agent String here
Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)Is this for Addition / Removal?
- [x] Addition
- [ ] Removal
- [x] Keep a watch on this one
Did the User-Agent request robots.txt first?
- [ ] Yes
- [x] No
Post Log Excerpt to show User-Agent behavior (10-20 lines is enough)
2600:1003:b025:2bc1:18df:5e61:4fe2:1d6f - - ------.com [23/Jun/2019:07:45:28 +0200] "GET /wp-content/uploads/2010/12/-----.jpg HTTP/2.0" 200 105846 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)" "-"PORT:443 0.039 - . "GZIP:-" 201.185.225.66 - - ------.com [24/Jun/2019:00:03:55 +0200] "GET /wp-content/uploads/2019/04/-----.jpg HTTP/1.1" 200 374325 "-" "Dalvik/2.1.0 (Linux; U; Android 8.0.0; SM-G9350 Build/R16NW)" "-"PORT:443 0.535 - . "GZIP:-" 161.10.100.212 - - ------.com [24/Jun/2019:19:00:56 +0200] "GET /wp-content/uploads/2016/10/-----.jpg HTTP/2.0" 200 350501 "-" "Dalvik/2.1.0 (Linux; U; Android 8.0.0; moto e5 plus Build/OPP27.91-179)" "-"PORT:443 0.423 - . "GZIP:-" 2607:fb90:ae18:fa40:7ff1:82f1:f41f:42b9 - - ------.com [25/Jun/2019:19:35:44 +0200] "GET /wp-content/uploads/2016/10/-----.jpg HTTP/1.1" 200 350501 "-" "Dalvik/2.1.0 (Linux; U; Android 7.0; LGMP260 Build/NRD90U)" "-"PORT:443 0.390 - . "GZIP:-" 84.94.179.236 - - ------.com [26/Jun/2019:15:43:31 +0200] "GET /wp-content/uploads/2013/08/-----.jpg HTTP/1.1" 301 162 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-A505F Build/PPR1.180610.011)" "-"PORT:80 0.000 - . "GZIP:-" 84.94.179.236 - - ------.com [26/Jun/2019:15:43:32 +0200] "GET /wp-content/uploads/2013/08/-----.jpg HTTP/2.0" 200 264601 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-A505F Build/PPR1.180610.011)" "-"PORT:443 0.407 - . "GZIP:-" 178.197.249.36 - - ------.com [27/Jun/2019:12:31:25 +0200] "GET /wp-content/uploads/2016/09/-----.jpg HTTP/1.1" 200 196603 "-" "Dalvik/1.6.0 (Linux; U; Android 4.4.2; SM-T520 Build/KOT49H)" "-"PORT:443 0.200 - . "GZIP:-" 212.5.158.229 - - ------.com [27/Jun/2019:13:24:37 +0200] "GET /wp-content/uploads/2019/06/-----.jpg HTTP/2.0" 200 259319 "-" "Dalvik/2.1.0 (Linux; U; Android 8.1.0; Redmi 6A MIUI/V10.3.3.0.OCBMIXM)" "-"PORT:443 0.476 - . "GZIP:-" 2600:1700:610:f420:5412:6385:2d98:25a6 - - ------.com [27/Jun/2019:14:08:37 +0200] "GET /wp-content/uploads/2013/03/-----.jpg HTTP/2.0" 200 57395 "-" "Dalvik/2.1.0 (Linux; U; Android 6.0.1; SM-G900P Build/MMB29M)" "-"PORT:443 0.000 - . "GZIP:-"Additional information
Never requests pages only images / photos Could be a background service for another app Needs monitoring
Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011)
I see requests from Google with similar user-agent:
74.125.209.7 - - [22/Mar/2023:04:58:08 +0200] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011),gzip(gfe)" (0.000) 74.125.209.15 - - [22/Mar/2023:04:59:34 +0200] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011),gzip(gfe)" (0.000) 74.125.209.11 - - [22/Mar/2023:05:02:01 +0200] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Dalvik/2.1.0 (Linux; U; Android 9; SM-G950U Build/PPR1.180610.011),gzip(gfe)" (0.000)
