Overview
PayPal is a webhook callback used for webhook delivery, payment notifications, service callbacks, and server-to-server integration events.
Its primary user-agent pattern is PayPal; related patterns include PayPal IPN ( https://www.paypal.com/ipn ); a representative HTTP user-agent is PayPal/AUHR-214.0-51787073 PayPal IPN ( https://www.paypal.com/ipn ).
PayPal is verified with Medium confidence. The identity type is Verified Bot, and the evidence basis is a public crawler reference or source-linked documentation.
PayPal is marked as not reliably governed by robots.txt directives; use server-side rules if the traffic should be restricted.
PayPal can usually be allowed after confirming the source and monitoring request volume.
Identity
- User-Agent
PayPal- Aliases
- PayPal IPN ( https://www.paypal.com/ipn )
- HTTP Agent Examples
PayPal/AUHR-214.0-51787073 PayPal IPN ( https://www.paypal.com/ipn )- Robots.txt Token
PayPal- Identity Type
- Verified Bot
- Evidence Method
- Verify PayPal by matching `PayPal` to a public crawler reference or source-linked documentation, then checking reverse DNS, IP ownership, request behavior, and crawl consistency.
Classification
- Type
- Webhook
- Kind
- Webhook
- Family
- PayPal
- Purpose
- webhook
Behavior and handling
- Common Use
- PayPal is used for webhook delivery, payment notifications, service callbacks, and server-to-server integration events.
- Detection Notes
- PayPal traffic is primarily detected by the `PayPal` user-agent pattern; related patterns include `PayPal IPN ( https://www.paypal.com/ipn )`; a representative HTTP user-agent is `PayPal/AUHR-214.0-51787073 PayPal IPN ( https://www.paypal.com/ipn )`. Compare source IPs, reverse DNS, request paths, and crawl cadence before trusting the traffic.
- Respects robots.txt
- No
- Spoofing Risk
- PayPal has medium spoofing risk because user-agent strings can be copied; pair the match with DNS, IP, behavior, or operator evidence.
- Risk
- Safe
- Recommended Handling
- No
Rules and controls
- Robots.txt Snippet
# This agent may ignore robots.txt. Use authenticated access controls or network policy when blocking is required.