Support

Admin Tools

#9996 Bad Behaviour

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Saturday, 27 August 2011 04:49 CDT

Thursday, 11 August 2011 12:46 CDT

user43666
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? No
Have I searched the forum before posting? No
Have I read the documentation before posting (which pages?)? No
Joomla! version: (unknown)
PHP version: (unknown)
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: (unknown)


Description of my issue:
Are these bad?
Bad Behaviour (User-Agent claimed to be Googlebot, claim appears to be false.)

and:Bad Behaviour (User-Agent claimed to be Yahoo, claim appears to be false)

Not sure if I should Blacklist these.

Thursday, 11 August 2011 13:44 CDT

nicholas
It depends on the IP. If clicking on the info link does not tell you that the IP belongs to Google you should block these IPs.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 11 August 2011 13:53 CDT

user43666
What link would you be referring to?

Thank you

Thursday, 11 August 2011 14:39 CDT

nicholas
Which version of Admin Tools Professional have you got? If it's the latest, going to Web Application Firewall, Exceptions Log will have a magnifying glass icon on the left side of the IP address. Clicking on it opens a page in ip-lookup.net which gives you information about this IP.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 11 August 2011 14:45 CDT

user43666
Thanks. I missed that.

Thursday, 11 August 2011 14:47 CDT

nicholas
With so many features in my components, it's easy to miss a handful of them. No worries :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 15 August 2011 14:33 CDT

tcgass
I do have the same "problem", but I know the ip adress :it belongs to a company that regularely checks my site for malware, since it had been infected a couple of weeks before.

Is there any way to tell akeeba tools to accept this IP address and stop sending out warnings? Puttin it on the whitelist didn't help so far.

Thomas

Saturday, 27 August 2011 04:49 CDT

nicholas
Hi Thomas,

Sorry for the late reply. For some odd reason all notifications from August 15th came to me today :s The strange thing is that all notifications from 16th to 26th came to me normally.

You can add the known IP to the safe IP list very easily. Please go to Components, Admin Tools, Web Application Firewall, Configure WAF, find the Bad Behaviour Integration are and add the IP to the "White list IPs (comma separated list)" textbox. This will prevent security exceptions from being triggered from this IP. You may also want to add this IP to the "Never block these IPs" list in the "Auto-ban Repeat Offenders" area.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!