About this bot
Sucuri is an automated identity associated with Sucuri and used for remote malware scanning, integrity monitoring, blacklist checks, and website-security diagnostics.
The primary recorded identity signal is Sucuri. Representative HTTP identity: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 MSIE 7.0; Sucuri Integrity Monitor/2.4.
Directory status: Active. Identity classification: Verified with Medium confidence. Identity type: multi-user-agent-scanner.
robots.txt behavior is not currently confirmed; use server-side controls when enforcement is required.
Risk classification: Safe. Recommended handling: depends.
How to identify this bot
- User-agent and crawler identifiers
-
SucuriMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 MSIE 7.0; Sucuri Integrity Monitor/2.4Sucuri Integrity Monitor/2.4
Details
- Kind
- Security scanner
- Family
- Sucuri
- Purpose
- Remote malware and integrity scanning
- Common Use
- remote malware scanning, integrity monitoring, blacklist checks, and website-security diagnostics
- Respects robots.txt
- Unknown
Verification
- Identity Type
- multi-user-agent-scanner
- Evidence Method
- Match Sucuri-specific request markers and corroborate with the expected SiteCheck/integrity-monitor workflow or known service network context.
- Detection Notes
- Sucuri remote scanning intentionally uses multiple browsers, referrers, and User-Agents to detect cloaked malware, so one fixed UA cannot represent every scan.
Website controls
- Robots.txt Snippet
# robots.txt behavior is unconfirmed. Do not rely on a robots.txt rule without verification.- Apache Rule
SetEnvIfNoCase User-Agent "Sucuri" bot_match- Nginx Rule
if ($http_user_agent ~* "Sucuri") { set $bot_match 1; }