• Resolved hescominsoon

    (@hescominsoon)


    Even since this newer UI version came out the classification system is about useless. most mobile users are getting classified by the traffic system as bots:

    United States Hagerstown, United States arrived from https://m.facebook.com/ and visited https://www.aminerdetail.com/hagerstown-maco-has-a-major-pr-crisis
    5/19/2016 4:05:18 PM (3 minutes ago) IP: 24.170.227.176 [block] Hostname: dyn-170-227-176.myactv.net
    Browser: Android WebView version 4.0 running on Android
    Mozilla/5.0 (Linux; Android 6.0.1; SM-G920P Build/MMB29K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/50.0.2661.86 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/77.0.0.20.66;]

    this is quite obviously a moble android device

    United States Aldie, United States visited https://aminerdetail.com/
    5/19/2016 4:02:05 PM (7 minutes ago) IP: 108.31.114.242 [block] Hostname: 108.31.114.242
    Browser: Safari version 9.0 running on iOS
    Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13E238 Safari/601.1

    This is quite obviously an IOS device. This makes the statistics pretty useless as it obviously is unable to tell between a mobile device and a bot. This also means i have to drastically loosen my access settings for bots because wordfence is now unable to tell the difference between just about every human holding mobile device and an automated bot.

    https://www.ads-software.com/plugins/wordfence/

Viewing 6 replies - 1 through 6 (of 6 total)
  • Hello hescominsoon,
    I agree those look like mobile phones. Bots and botnets can actually run via mobile connections (hacked phones) though it’s not the most common occurrence yet. Are you not seeing any similar entries in the “Humans” category?

    Thread Starter hescominsoon

    (@hescominsoon)

    nopers…everything mobile is being shifted into bots.

    Thread Starter hescominsoon

    (@hescominsoon)

    here’s another misclassification..this is a Mas OSX desktop

    United States Seymour, United States visited https://www.aminerdetail.com/
    5/19/2016 6:09:40 PM (3 minutes ago) IP: 73.250.210.121 [block] Hostname: c-73-250-210-121.hsd1.md.comcast.net
    Browser: Chrome version 50.0 running on MacOSX
    Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

    Hello hescominsoon,
    the latest version of Wordfence (6.1.8) includes some updates to our Geo IP database which should have at least partially fixed this issue. I hope you can see some improvement if you update.

    Thread Starter hescominsoon

    (@hescominsoon)

    not much improvement:

    United States Frederick, United States left https://thepublicspectacle.com/wp-login.php and logged in successfully as “wwarren”. https://thepublicspectacle.com/wp-login.php
    5/28/2016 4:10:31 PM (2 minutes ago) IP: 50.190.62.34 [block] Hostname: c-50-190-62-34.hsd1.md.comcast.net
    Browser: Chrome version 50.0 running on Win7
    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
    Block this IP Block this network Run WHOIS on 50.190.62.34 See recent traffic
    wwarren in United States Frederick, United States left https://thepublicspectacle.com/wp-login.php?redirect_to=https%3A%2F%2Fthepublicspectacle.com%2Fwp-admin%2F&reauth=1 and attempted a failed login as “wwarren”. https://thepublicspectacle.com/wp-login.php
    5/28/2016 4:10:24 PM (3 minutes ago) IP: 50.190.62.34 [block] Hostname: c-50-190-62-34.hsd1.md.comcast.net
    Browser: Chrome version 50.0 running on Win7
    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
    Block this IP Block this network Run WHOIS on 50.190.62.34 See recent traffic

    It clal ME a bot.

    Thanks for the update hescominsoon I’ll check in with the devs and see if they have any answers.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘too many things are getting misclassified as bots’ is closed to new replies.