uap-core icon indicating copy to clipboard operation
uap-core copied to clipboard

Add new bot useragents

Open nottrobin opened this issue 3 years ago • 0 comments

I've just completed quite an extensive project of finding and blocking bots from querying our search, which has been costing us money as we make use of Google Programmable Search behind the scenes. I've spent a long time going through the significant server logs from across Canonical's websites.

I've been using user-agents to automatically block bots (using is_bot), which I now realise is all based on the regex in https://github.com/ua-parser/uap-core/blob/master/regexes.yaml. This does a great job, but I've also found the following user-agents which I needed to block manually. We've have had a significant amount of traffic from each of these agents. I'm wondering if you may want to add any of them to your list:

python-urllib3/1.26.9
python-requests/2.27.1
python-httpx/0.23.0
python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-862.14.4.el7.x86_64
python-requests/2.4.3 CPython/3.7.3 Linux/4.9.35-v7+
python-asks/2.2.0
python-opengraph-jaywink/0.2.1 (+https://github.com/jaywink/python-opengraph)
Go-http-client/1.1
kube-probe/1.15
Prometheus/2.9.2
curl/7.58.0
curl
urlwatch/2.25 (+https://thp.io/2008/urlwatch/info.html)
GuzzleHttp/6.3.3 curl/7.68.0 PHP/8.0.20
GuzzleHttp/7
Feedly/1.0
Feedly/1.0 (+http://www.feedly.com/fetcher.html; 18 subscribers; like FeedFetcher-Google)
github-camo (0529d7ac)
Site24x7
check_http/v2.2 (monitoring-plugins 2.2)
Tiny Tiny RSS/22.06-b148d2f51 (Unsupported) (https://tt-rss.org/)
RSS Discovery Engine 0.1
NetNewsWire (RSS Reader; https://netnewswire.com/)
ALittle Client
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/86.0.4240.111 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0

Of all of these, the biggest in terms of requests to our sites were: Python*, go-http-client, Assetnote, HeadlessChrome, Tiny Tiny RSS, check_http.

nottrobin avatar Jul 12 '22 20:07 nottrobin