latest nuisance trend is exploit / credential scanners reporting useragents of chatgpt. usually from google's compute network, too.
August 19, 2026 at 11:31 PM
latest nuisance trend is exploit / credential scanners reporting useragents of chatgpt. usually from google's compute network, too.
wait nvm it indeed ignores like most of the useragents 🥴🥴🥴
(specifically it seems that any useragents not containing "Mozilla" are bypassed)
im gonna go write an extension that detects anubis page and override useragent to "fuck anubis" for that website :3
(specifically it seems that any useragents not containing "Mozilla" are bypassed)
im gonna go write an extension that detects anubis page and override useragent to "fuck anubis" for that website :3
April 27, 2025 at 7:41 PM
wait nvm it indeed ignores like most of the useragents 🥴🥴🥴
(specifically it seems that any useragents not containing "Mozilla" are bypassed)
im gonna go write an extension that detects anubis page and override useragent to "fuck anubis" for that website :3
(specifically it seems that any useragents not containing "Mozilla" are bypassed)
im gonna go write an extension that detects anubis page and override useragent to "fuck anubis" for that website :3
tor scraper person seems to have given up (or moved on) for now; after i nuked all of tor, they kept trying (new useragents and referrer, this time Apocalypse (PS1), how appropriate) but eventually gave up, and i haven't seen them trying again.
the ddos is still ongoing, though, frustratingly
the ddos is still ongoing, though, frustratingly
March 6, 2025 at 12:39 AM
tor scraper person seems to have given up (or moved on) for now; after i nuked all of tor, they kept trying (new useragents and referrer, this time Apocalypse (PS1), how appropriate) but eventually gave up, and i haven't seen them trying again.
the ddos is still ongoing, though, frustratingly
the ddos is still ongoing, though, frustratingly
very tempting to secretly make alternate versions of every one of my blog post with all the facts made subtly wrong and feeding them to openai, gemini, etc. useragents and referers
February 12, 2026 at 2:14 AM
very tempting to secretly make alternate versions of every one of my blog post with all the facts made subtly wrong and feeding them to openai, gemini, etc. useragents and referers
which btw ngl makes their money by being an IP grabber
if you pay $6/week you can see IP addresses and useragents
if you pay $6/week you can see IP addresses and useragents
January 1, 2025 at 6:24 AM
which btw ngl makes their money by being an IP grabber
if you pay $6/week you can see IP addresses and useragents
if you pay $6/week you can see IP addresses and useragents
I've been trying to set up similar anti-bot checks for my own site. Would you be willing to share the full list of user age… — this isn't AI useragents specifically but this is the nginx blockline. yes it is long and stupid
[list in answer ->] alterspring.org/@Xkeeper/a/1...
[list in answer ->] alterspring.org/@Xkeeper/a/1...
X answered: I've been trying to set up similar anti-bot checks for my own site. Would you be willing to share the full list of user agents that you check against? I understand the very obvious reason ...
this isn't AI useragents specifically but this is the nginx blockline. yes it is long and stupid
Steam HTTP Client|AhrefsBot|Semrush|baidu|sogou|YisouSpider|GPTBot|ChatGPT|meta-webindexer|externalhi...
alterspring.org
September 16, 2026 at 4:24 PM
I've been trying to set up similar anti-bot checks for my own site. Would you be willing to share the full list of user age… — this isn't AI useragents specifically but this is the nginx blockline. yes it is long and stupid
[list in answer ->] alterspring.org/@Xkeeper/a/1...
[list in answer ->] alterspring.org/@Xkeeper/a/1...
other errata about the numbers:
- normal useragents typically request 4-6 "pages" (the article + all the supporting stylesheets/js) at first, then about 1.25 every article they read (caching)
- bots tend for either 1 or 1000 (get blocked or spam lots)
- chatgpt frequently repeats requests now
- normal useragents typically request 4-6 "pages" (the article + all the supporting stylesheets/js) at first, then about 1.25 every article they read (caching)
- bots tend for either 1 or 1000 (get blocked or spam lots)
- chatgpt frequently repeats requests now
July 10, 2025 at 8:46 PM
other errata about the numbers:
- normal useragents typically request 4-6 "pages" (the article + all the supporting stylesheets/js) at first, then about 1.25 every article they read (caching)
- bots tend for either 1 or 1000 (get blocked or spam lots)
- chatgpt frequently repeats requests now
- normal useragents typically request 4-6 "pages" (the article + all the supporting stylesheets/js) at first, then about 1.25 every article they read (caching)
- bots tend for either 1 or 1000 (get blocked or spam lots)
- chatgpt frequently repeats requests now
huh. confused how this works (i assume it's checking useragents, but idk where it's even getting them from), but it's not really a major issue i don't think. public data apparently, and also not very useful for any sort of attack.
March 28, 2025 at 7:24 PM
huh. confused how this works (i assume it's checking useragents, but idk where it's even getting them from), but it's not really a major issue i don't think. public data apparently, and also not very useful for any sort of attack.
This has been going on a long time. It stinks.
If you can trick companies sites that you're 2 different useragents/IPs you can get 2 different prices.
If you can trick companies sites that you're 2 different useragents/IPs you can get 2 different prices.
I did not know about this kind of insidious pricing. Thank you for highlighting it!
March 29, 2026 at 6:37 PM
This has been going on a long time. It stinks.
If you can trick companies sites that you're 2 different useragents/IPs you can get 2 different prices.
If you can trick companies sites that you're 2 different useragents/IPs you can get 2 different prices.
#Development #Launches
ua-tracer · Inspect what a user agent actually does ilo.im/16e91f by Paul Kinlan
_____
#UserAgents #Crawlers #AI #Websites #Development #WebDev #Frontend #CSS #JavaScript #Backend
ua-tracer · Inspect what a user agent actually does ilo.im/16e91f by Paul Kinlan
_____
#UserAgents #Crawlers #AI #Websites #Development #WebDev #Frontend #CSS #JavaScript #Backend
ua-tracer
See what a user agent downloads, follows, and executes.
ilo.im
July 5, 2026 at 3:17 PM
#Development #Launches
ua-tracer · Inspect what a user agent actually does ilo.im/16e91f by Paul Kinlan
_____
#UserAgents #Crawlers #AI #Websites #Development #WebDev #Frontend #CSS #JavaScript #Backend
ua-tracer · Inspect what a user agent actually does ilo.im/16e91f by Paul Kinlan
_____
#UserAgents #Crawlers #AI #Websites #Development #WebDev #Frontend #CSS #JavaScript #Backend
Nettopp. Trengte ikke grave veldig lang for å se at det eneste grunnen til at denne siden finnes er for å mappe ip-adresser og useragents med politiske partier
May 23, 2025 at 4:36 PM
Nettopp. Trengte ikke grave veldig lang for å se at det eneste grunnen til at denne siden finnes er for å mappe ip-adresser og useragents med politiske partier
yeah for some reason devs keep turning useragents into a principal-agent problem
May 3, 2023 at 5:32 PM
yeah for some reason devs keep turning useragents into a principal-agent problem
Time to get a #KQL query from the shelve: Potential Adversary in the middle Phishing
If you have High-Risk users and axios useragents in the results please revoke some sessions.
🏹 github.com/Bert-JanP/Hu...
Query is available for both SigninLogs and AADSignInEventsBeta.
If you have High-Risk users and axios useragents in the results please revoke some sessions.
🏹 github.com/Bert-JanP/Hu...
Query is available for both SigninLogs and AADSignInEventsBeta.
December 2, 2024 at 5:37 PM
Time to get a #KQL query from the shelve: Potential Adversary in the middle Phishing
If you have High-Risk users and axios useragents in the results please revoke some sessions.
🏹 github.com/Bert-JanP/Hu...
Query is available for both SigninLogs and AADSignInEventsBeta.
If you have High-Risk users and axios useragents in the results please revoke some sessions.
🏹 github.com/Bert-JanP/Hu...
Query is available for both SigninLogs and AADSignInEventsBeta.
s2.
Die sollte jeder regelmäßig ändern!
Hier sind einige gute Seiten, wo man Hitlisten davon findet
www.useragents.me
useragents.io
microlink.io/user-agents
Hier kann man seinen User Agent auslesen lassen:
whatmyuseragent.com
Die sollte jeder regelmäßig ändern!
Hier sind einige gute Seiten, wo man Hitlisten davon findet
www.useragents.me
useragents.io
microlink.io/user-agents
Hier kann man seinen User Agent auslesen lassen:
whatmyuseragent.com
The Latest and Most Common User Agents List (Updated Weekly)
A self-updating list of the most current useragents across operating systems and browsers
www.useragents.me
February 3, 2025 at 6:51 PM
s2.
Die sollte jeder regelmäßig ändern!
Hier sind einige gute Seiten, wo man Hitlisten davon findet
www.useragents.me
useragents.io
microlink.io/user-agents
Hier kann man seinen User Agent auslesen lassen:
whatmyuseragent.com
Die sollte jeder regelmäßig ändern!
Hier sind einige gute Seiten, wo man Hitlisten davon findet
www.useragents.me
useragents.io
microlink.io/user-agents
Hier kann man seinen User Agent auslesen lassen:
whatmyuseragent.com
on the other hand, imagining the very petty console war blocklists based on useragents from console posts
March 30, 2025 at 1:14 AM
on the other hand, imagining the very petty console war blocklists based on useragents from console posts
Happy to release Proxy_Bypass 😎
Post exploitation tool to identify UserAgents that bypasses proxy restrictions.
github.com/Add3r/Proxy_By…#Pentestingn#Securityt#Hackingn#CyberSecurityt#infosece#redteama#pentests#hackersr#codingn#opensourcec#purpleteama#bugbountyt#hackc#proxyxy
Post exploitation tool to identify UserAgents that bypasses proxy restrictions.
github.com/Add3r/Proxy_By…#Pentestingn#Securityt#Hackingn#CyberSecurityt#infosece#redteama#pentests#hackersr#codingn#opensourcec#purpleteama#bugbountyt#hackc#proxyxy
https://github.com/Add3r/Proxy_By…
November 29, 2024 at 3:14 AM
Happy to release Proxy_Bypass 😎
Post exploitation tool to identify UserAgents that bypasses proxy restrictions.
github.com/Add3r/Proxy_By…#Pentestingn#Securityt#Hackingn#CyberSecurityt#infosece#redteama#pentests#hackersr#codingn#opensourcec#purpleteama#bugbountyt#hackc#proxyxy
Post exploitation tool to identify UserAgents that bypasses proxy restrictions.
github.com/Add3r/Proxy_By…#Pentestingn#Securityt#Hackingn#CyberSecurityt#infosece#redteama#pentests#hackersr#codingn#opensourcec#purpleteama#bugbountyt#hackc#proxyxy
On va revenir au cloaking, cette fois pour les UserAgents des LLM.
La boucle est bouclée, le SEO n'est toujours pas mort
La boucle est bouclée, le SEO n'est toujours pas mort
November 28, 2024 at 8:46 AM
On va revenir au cloaking, cette fois pour les UserAgents des LLM.
La boucle est bouclée, le SEO n'est toujours pas mort
La boucle est bouclée, le SEO n'est toujours pas mort
naïve guess: overrepresentative amounts of xp-era useragents due to how wildly varying they were at the time (compared to today's more sanitary ua strings)
March 27, 2025 at 11:40 AM
naïve guess: overrepresentative amounts of xp-era useragents due to how wildly varying they were at the time (compared to today's more sanitary ua strings)
Why are we still taking useragents at face value? 🤦
August 5, 2025 at 1:45 AM
Why are we still taking useragents at face value? 🤦
AT&T's Cybersecurity RSS feed is behind a dumb ass WAF that fingerprints and filters useragents
after numerous permutations I managed to find one that works for irc-rss-feed-bot without fail: curl/7.xx.y
rofl
after numerous permutations I managed to find one that works for irc-rss-feed-bot without fail: curl/7.xx.y
rofl
August 14, 2024 at 11:15 PM
AT&T's Cybersecurity RSS feed is behind a dumb ass WAF that fingerprints and filters useragents
after numerous permutations I managed to find one that works for irc-rss-feed-bot without fail: curl/7.xx.y
rofl
after numerous permutations I managed to find one that works for irc-rss-feed-bot without fail: curl/7.xx.y
rofl
[...] in their results because they don't use proper useragents, they don't use proper google ips, it is a legitimate unidentifiable botnet, they know it, and it's really given me no option but just to turn my cloudflare settings up to the max so that i'm not hit with so many requests that [...]
February 27, 2026 at 11:01 PM
[...] in their results because they don't use proper useragents, they don't use proper google ips, it is a legitimate unidentifiable botnet, they know it, and it's really given me no option but just to turn my cloudflare settings up to the max so that i'm not hit with so many requests that [...]
Nothing more entertaining than going through your modsec_audit logs & looking at all the ridiculous useragents bots make up. What even is this:
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1
January 1, 2026 at 7:12 PM
Nothing more entertaining than going through your modsec_audit logs & looking at all the ridiculous useragents bots make up. What even is this:
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1
[...] i've noticed that even with very very loose rules in iocaine (like, i only deny fake browser useragents), the results on google get polluted with iocaine garbage. google is not respecting anyone who does not want their site scraped, if you block them then you're never going to show up [...]
February 27, 2026 at 11:01 PM
[...] i've noticed that even with very very loose rules in iocaine (like, i only deny fake browser useragents), the results on google get polluted with iocaine garbage. google is not respecting anyone who does not want their site scraped, if you block them then you're never going to show up [...]
Oh, yeah, I was gonna get around to this -- do you have any PS Vita browser useragents? :)
September 25, 2025 at 9:42 PM
Oh, yeah, I was gonna get around to this -- do you have any PS Vita browser useragents? :)