Security issues reported by an AI tool in CCID driver

version 1.8.3 of the CCID driver (New version of libccid: 1.8.3) addresses 6 security issues identified by an AI tool.

Very low impact

The reported issues are either not exploitable because the input and output buffers used by PC/SC Lite to call the CCID driver are large enough, or the exploitation requires rogue smart card or smart card reader (i.e. sending non-compliant data).

If you would like to read the details, the issues have been fixed in the following git commits:

Comments

The AI tool identified real issues.

However, it would be difficult to exploit these issues unless the attacker used a custom-built reader or smart card. This is something I started doing with the Pico HSM project, which is a CCID reader in a Raspberry Pi Pico. This allows you to modify the CCID frames sent by the reader as required.

The bug reports from the AI tool are very verbose. This is useful for impressing a manager with a long, complex-looking text. However, reading the entire report is often a waste of my time. It is often much faster to read the proposed patch to understand the problem it is trying to fix.

The proposed fixes are, sometimes, incorrect. They are a good starting point, though. However, never apply an AI-generated patch without fully understanding it.

Conclusion

Thanks to Red Hat and Jakub Jelen for the bug reports.

I am very happy that the AI tool only identified issues with no or low impact.

New version of libccid: 1.8.3

I have just released version 1.8.3 of libccid the Free Software CCID class smart card reader driver.

Red Hat reported 6 security issues found by an AI tool. See Security issues reported by an AI tool in CCID driver.

Changes:

1.8.3 - 29 August 2026, Ludovic Rousseau

  • Add support of

    • Broadcom Corp 58200 0x5884

    • Broadcom Corp 58200 0x5885

    • Broadcom Corp 58200 0x5886

    • Broadcom Corp 58200 0x5887

    • Circle CIR135 ICC

    • DigiFlow LLP. KAZTOKEN

    • HID Global Crescendo NFC Reader

    • HID Global OMNIKEY Plug

    • HID Global OMNIKEY SE Plug

    • Neowave LinkeoC-PRO

    • Swissbit iShield Key 2 Pro

  • macOS: provide a sample script to build the driver with meson

  • fix some minor issues found by an AI tool

  • Some other minor improvements

New version of PyKCS11: 1.5.19

I just released a new version of PyKCS11, a Python wrapper above the PKCS#11 API.

See PyKCS11 introduction or PyKCS11’s documentation.

The project is registered at Pypi: https://pypi.org/project/PyKCS11/

Changes:

1.5.19 - August 2026, Ludovic Rousseau

  • Add support of swig 4.5.0

  • getMechanismList(): do not fail on unknown mechanisms

  • Remove use of deprecated CKA_SECONDARY_AUTH

  • test/reset_softHSM:

    • add support of Homebrew on arm64

    • add some output traces

  • setup: Rename the project in lower case

  • Move source code in src/

  • minor improvements

Some web statistics about blog.apdu.fr

Like I did for https://ccid.apdu.fr/ (see Some web statistics about ccid.apdu.fr) I also analysed the web server logs for this blog at https://blog.apdu.fr/.

I used the logs from June 2026.

The server received a total of 162,444 requests. This equates to 5,414 requests per day, or 3.8 requests per minute. This is also a website with very low traffic.

All requests

OS

#

%

Other

78260

48.18%

Windows

29727

18.30%

Mac OS X

25096

15.45%

Linux

9796

6.03%

iOS

7010

4.32%

Unknown

5602

3.45%

Android

4244

2.61%

Ubuntu

2063

1.27%

FreeBSD

365

0.22%

Chrome OS

137

0.08%

Fedora

33

0.02%

Kubuntu

23

0.01%

Debian

22

0.01%

CentOS

21

0.01%

OpenBSD

7

0.00%

Symbian OS

6

0.00%

Windows Phone

5

0.00%

NetBSD

5

0.00%

Linux Mint

3

0.00%

BREW

3

0.00%

Symbian^3 Anna

2

0.00%

Symbian^3

2

0.00%

Solaris

2

0.00%

Slackware

2

0.00%

BlackBerry OS

2

0.00%

webOS

1

0.00%

Red Hat

1

0.00%

Maemo

1

0.00%

Kindle

1

0.00%

BlackBerry Tablet OS

1

0.00%

BSD

1

0.00%

The main difference between this site and https://ccid.apdu.fr/ is that bots ('Other' category) account for half of the requests.

The first human client category is 'Windows', accounting for 18%, which is surprising. Perhaps my users are forced to use Windows at work, but are looking for information about macOS or GNU/Linux. Or maybe they use my Free Software tools on Windows.

Second is macOS at 15%.

Third is GNU/Linux, accounting for just 6%.

Bots

48% of the requests fall into the 'Other' category. These are bots, and not human users.

OS

#

%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot

10935

13.97%

NextCloud-News/28.6.0

6308

8.06%

Feedly/1.0 (+http://www.feedly.com/fetcher.html; 17 subscribers; )

6304

8.06%

Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)

4599

5.88%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36

4262

5.45%

Mozilla/5.0 (compatible; Qwantbot/1.0; +https://help.qwant.com/bot/)

4044

5.17%

TLM-Audit-Scanner/1.0

3180

4.06%

Feedbin feed-id:3529185 - 1 subscribers

2757

3.52%

curl/7.64.1

2719

3.47%

Mozilla/5.0 (compatible; Googlebot/2.1)

2425

3.10%

NetNewsWire (RSS Reader; https://netnewswire.com/)

2385

3.05%

Tiny Tiny RSS/26.06-87b42eb3 (Unsupported) (https://github.com/tt-rss/tt-rss)

1951

2.49%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36

1490

1.90%

Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)

1434

1.83%

Scrapy/2.16.0 (+https://scrapy.org)

1385

1.77%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

1290

1.65%

Mozilla/5.0 (compatible; Miniflux/2.3.x-dev; +https://miniflux.app)

1165

1.49%

Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)

1128

1.44%

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

1083

1.38%

Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)

976

1.25%

Go-http-client/1.1

960

1.23%

Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15

847

1.08%

NetNewsWire/3.3.2 (Mac OS X; http://netnewswireapp.com/mac/; gzip-happy)

703

0.90%

Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)

648

0.83%

Mozilla/5.0 (compatible; IbouBot/1.0; +bot@ibou.io; +https://ibou.io/iboubot.html)

635

0.81%

Mozilla/5.0 (compatible; SeznamBot/4.0; +https://o-seznam.cz/napoveda/vyhledavani/en/seznambot-crawler/)

630

0.81%

Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)

607

0.78%

Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)

586

0.75%

l9explore/1.2.2

580

0.74%

Mozilla/5.0 (compatible)

565

0.72%

Mozilla/5.0 (compatible; Newslitbot/0.1; +https://www.newslit.co)

557

0.71%

Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)

551

0.70%

Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)

379

0.48%

Mozilla/5.0 (compatible; pathscan/1.0)

375

0.48%

Mozilla/5.0 zgrab/0.x

364

0.47%

DuckAssistBot/1.2; (+http://duckduckgo.com/duckassistbot.html)

364

0.47%

Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)

363

0.46%

Chrome Privacy Preserving Prefetch Proxy

321

0.41%

facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)

286

0.37%

Mozilla/5.0

262

0.33%

Claude-User (claude-code/2.1.197; +https://support.anthropic.com/)

256

0.33%

RSS.Social/1.0 +https://rss.social/bot

252

0.32%

Mozilla/5.0 (compatible; crawler)

251

0.32%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ShapBot/0.1.0

248

0.32%

Mozilla/5.0 (compatible; special_archiver/3.11.1; +https://archive.org/details/archive.org_bot)

225

0.29%

Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)

220

0.28%

Mozilla/4.0 (compatible; ms-office; MSOffice 16)

214

0.27%

CCBot/2.0 (https://commoncrawl.org/faq/)

196

0.25%

com.apple.WebKit.Networking/22625.1.20.11.3 Network/6681.0.436.0.8 macOS/27.0

195

0.25%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)

167

0.21%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)

160

0.20%

DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)

157

0.20%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36

137

0.18%

Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)

125

0.16%

Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)

125

0.16%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36

120

0.15%

Slack-ImgProxy (+https://api.slack.com/robots)

116

0.15%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ReyilBot/0.1

112

0.14%

Turnitin (https://bit.ly/2UvnfoQ)

94

0.12%

python-requests/2.32.5

89

0.11%

python-httpx/0.28.1

88

0.11%

Apache-HttpClient/4.5.2 (Java/1.8.0_161)

85

0.11%

Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)

84

0.11%

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

77

0.10%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GoogleOther) Chrome/148.0.7778.96 Safari/537.36

70

0.09%

ClueWeb-Crawler/1.0 (+https://boston.lti.cs.cmu.edu/CMU-ClueWeb-Crawler/; mailto:cmu-clueweb-crawler@andrew.cmu.edu)

67

0.09%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; SleepBot/1.0; +http://sleepbot.com/) Chrome/131.0.0.0 Safari/537.36

64

0.08%

Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)

64

0.08%

More Internet Explorer 5.0 user agents strings -->>

56

0.07%

meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

53

0.07%

search.marginalia.nu

43

0.05%

MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner; opt-out: mss-optout@stripe.com)

43

0.05%

Custom-AsyncHttpClient

43

0.05%

Akregator/6.6.3 (25.12.3); syndication

43

0.05%

Mozilla/5.0 (keys-so-bot)

38

0.05%

Mozilla/5.0 (compatible; FreePBX-Scanner/1.0)

38

0.05%

Mozilla/5.0 kagibot

36

0.05%

Mozilla/5.0 (compatible; CT-WP-Scanner/1.0; +https://example.com/bot)

33

0.04%

python-urllib3/1.26.9

31

0.04%

Mozilla/5.0 (l9scan/2.0.3313e27393e21393e21353; +https://leakix.net)

31

0.04%

OWLer

30

0.04%

Mozilla/5.0 (compatible; HostQuality/1.0)

30

0.04%

ENERGIEDIN-Prospecting-Audit/1.0 (+https://www.energiedin.com)

30

0.04%

Mozilla/5.0 (compatible; theoldreader.com; support@theoldreader.com; 2 subscribers; feed-id=ae8edd55b077ba3d2e7c2d28)

28

0.04%

Mozilla/5.0 (compatible; WebGameGameExternalAudit/1.0; +https://webgamegame.win/)

27

0.03%

Meridian

27

0.03%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)

26

0.03%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; AzureAI-SearchBot/1.0;

26

0.03%

node

25

0.03%

Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)

25

0.03%

Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)

25

0.03%

Mozilla/5.0 (compatible; Dataprovider.com)

25

0.03%

kagi-fetcher/1.0

24

0.03%

Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)

24

0.03%

Python/3.12 aiohttp/3.13.5

21

0.03%

Mozilla/5.0 (compatible; YandexRenderResourcesBot/1.0; +http://yandex.com/bots) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0

19

0.02%

pc

17

0.02%

l9tcpid/v1.1.0

17

0.02%

opendirme-credhunt/1.0

16

0.02%

Mozilla/5.0 (compatible; MojeekBot/0.11; +https://www.mojeek.com/bot.html)

16

0.02%

python-urllib3/2.7.0

15

0.02%

Twingly Recon-Sjostrom/1.0 (+https://app.twingly.com/public-docs/crawler)

15

0.02%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot

15

0.02%

Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots)

15

0.02%

Mozilla/5.0 (compatible; KagiTranslatePreview/1.0; +https://translate.kagi.com)

15

0.02%

Mozilla/5.0 (compatible; FeedValidator/1.0)

15

0.02%

hackney/1.25.0

14

0.02%

CapyReader (RSS Reader; https://capyreader.com/)

14

0.02%

Mozilla/5.0 (compatible; YaK/1.0; http://linkfluence.com/; bot@linkfluence.com)

13

0.02%

Exabot

13

0.02%

mint/1.9.0

12

0.02%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bravebot/1.0; +https://search.brave.com/help/brave-search-crawler) Chrome/W.X.Y.Z Safari/537.36

12

0.02%

Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)

12

0.02%

Mozilla/5.0 (compatible; HaloBot/1.0)

12

0.02%

Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)

12

0.02%

Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)

12

0.02%

AIWebIndex/2.0 (+https://lyrenth.com/bot; AI-readable web index)

12

0.02%

scrape_central/1.0

11

0.01%

Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)

11

0.01%

Mozilla/5.0 (compatible; Scanner/1.0)

11

0.01%

Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)

11

0.01%

Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)

11

0.01%

Java/1.8.0_171

11

0.01%

BrightEdge Crawler/1.0 (crawler@brightedge.com)

11

0.01%

anthropic-ai

10

0.01%

Mozilla/5.0 (compatible; matsuzaka-pathcheck/1.0)

10

0.01%

Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36

10

0.01%

Mozilla/5.0 (compatible; AffsignalCrawler/1.0; +https://affsignal.com/bot)

10

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)

9

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Shap-User/0.1.0

9

0.01%

Mozilla/5.0 (compatible; NetScope/1.0; +http://81.90.28.175/; security research scanner — submit exclusion requests at the linked URL)

9

0.01%

Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)

9

0.01%

INETDEX-BOT/2.0 (https://inetdex.com/bot.php)

9

0.01%

okhttp/5.3.0

8

0.01%

fasthttp

8

0.01%

Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);

8

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0

8

0.01%

Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)

8

0.01%

Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)

8

0.01%

Iframely/1.3.1 (+https://iframely.com/docs/about) Atlassian

8

0.01%

firefox

7

0.01%

Mozilla/5.0 zgrab2-dicomweb/1.0

7

0.01%

Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)

7

0.01%

Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)

7

0.01%

HTTP Banner Detection (https://security.ipip.net)

7

0.01%

fyndbot (robots; https://fynd.bot)

6

0.01%

amazon-Quick-on-behalf-of-0eb98072

6

0.01%

Umai-Scanner/2.0 (+https://umai.entelijan.com/methodology)

6

0.01%

Photon/1.0

6

0.01%

NTRIP GNSSInternetRadio

6

0.01%

Mozilla/5.0 pegasus-omnicorpus-fetch

6

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GoogleOther) Chrome/149.0.7827.155 Safari/537.36

6

0.01%

Mozilla/5.0 (compatible; DomainExtractor/1.0)

6

0.01%

Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co)

6

0.01%

Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)

6

0.01%

Iframely/1.3.1 (+https://iframely.com/docs/about) Gitbook

6

0.01%

link-check/5.5.1

5

0.01%

RecordedFuture Global Inventory Crawler

5

0.01%

Mozilla/5.0 (compatible; SecurityResearch/1.0; )

5

0.01%

Mozilla/5.0 (compatible; Luxxlebot/1.01; +https://www.luxxle.com/bot)

5

0.01%

Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)

5

0.01%

Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)

5

0.01%

Iframely/1.3.1 (+https://iframely.com/docs/about)

5

0.01%

python-urllib3/1.26.18

4

0.01%

gwf-carbon-txt-crawler/1.0 (Web Crawler for the Green Software Foundation to measure the adoption of the carbon.txt initiative; https://carbontxt.org/; support@greenweb.org)

4

0.01%

TelegramBot (like TwitterBot)

4

0.01%

SubtextSearchBot/0.1 (+local metadata crawler)

4

0.01%

SnipeSearchBot/Nutch-1.22

4

0.01%

RootEvidence/1.0

4

0.01%

NVBot

4

0.01%

Mozilla/5.0 (compatible; foda-scanner/0.1)

4

0.01%

Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)

4

0.01%

Moz111a/5.0 (1Pad; CPU 0S 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1

4

0.01%

GoogleOther

4

0.01%

Google-NotebookLM

4

0.01%

Down/5.6.0

4

0.01%

Deno/2.3.1

4

0.01%

DefaultLangchainUserAgent

4

0.01%

CrawlerBot/1.0

4

0.01%

udu/1.6.5

3

0.00%

snowyapi-scanner

3

0.00%

node-fetch

3

0.00%

gvfs/1.60.0

3

0.00%

gbrmss/7.29.0

3

0.00%

fingerprint-scan/0.1

3

0.00%

Wget/1.21.4 (HelpMeEscapeFromBelarus@proton.me)

3

0.00%

Twitterbot/1.0

3

0.00%

TechSpyBot/1.0 (+https://techspy.pro/bot)

3

0.00%

SonyEricssonK610i/R1CB Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1

3

0.00%

Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)

3

0.00%

Slackbot 1.0 (+https://api.slack.com/robots)

3

0.00%

SPARK COMMIT: 08059e95dacafe0bf6e5782f8e2c8ec9cd8c5a17

3

0.00%

Mozilla/5.0 crawler

3

0.00%

Mozilla/5.0 WebCache-mdream-rs/1.0

3

0.00%

Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15,gzip(gfe)

3

0.00%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Luxxlebot/1.01; +https://www.luxxle.com/bot) Chrome/116.0.5845.96 Safari/537.36

3

0.00%

Mozilla/5.0 (compatible) SemanticScholarBot (+https://www.semanticscholar.org/crawler)

3

0.00%

Gofeed/1.0

3

0.00%

w3m/0.5.1

2

0.00%

voucha-bot https://voucha.ai/article/voucha-bot

2

0.00%

rawweb-bot/1.0

2

0.00%

pimeyes-downloader-api/0.1

2

0.00%

meta-externalads/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

2

0.00%

icon.horse/2.0

2

0.00%

amazon-kendra

2

0.00%

abuse.xmco.fr

2

0.00%

Swisscows Favicons

2

0.00%

SonyEricssonW580i/R6BC Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1

2

0.00%

SearchExpress

2

0.00%

S33DBot/4.0 (+https://s33d.fr/bot)

2

0.00%

Python-urllib/3.12

2

0.00%

PAN GlobalProtect

2

0.00%

Opera/9.60 (J2ME/MIDP; Opera Mini/4.1.11320/608; U; en) Presto/2.2.0

2

0.00%

Openwave/ UCWEB7.0.2.37/28/999

2

0.00%

Nokia6230/2.0 (04.44) Profile/MIDP-2.0 Configuration/CLDC-1.1

2

0.00%

Mozilla/5.0 (compatible; YandexFavicons/1.0; +http://yandex.com/bots)

2

0.00%

Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html)

2

0.00%

Mozilla/5.0 (compatible; TigerBot/v1.03; Tiger.ch)

2

0.00%

Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)

2

0.00%

Mozilla/5.0 (compatible; HubSeedsBot/1.0)

2

0.00%

Google-Lens

2

0.00%

Chrome

2

0.00%

Bun/1.3.14

2

0.00%

ArenaUnfurlBot/1.0 (Link preview bot for AI model comparison platform; +https://arena.ai) Mozilla/5.0 (compatible)

2

0.00%

AliyunSecBot/Aliyun (AliyunSecBot@service.alibaba.com)

2

0.00%

undici

1

0.00%

silvyxran silver.inc

1

0.00%

search-agent/0.2.0 (+https://search-agent.local/open-graph)

1

0.00%

probethenet.com

1

0.00%

portalmmm/2.0 N410i(c20;TB)

1

0.00%

ncsrv

1

0.00%

msnbot/0.11 ( http://search.msn.com/msnbot.htm)

1

0.00%

manager(+internet-surf)

1

0.00%

libwww-perl/6.05

1

0.00%

insomnia/2023.5.8

1

0.00%

imgproxy/3.30.0

1

0.00%

grub-client-1.5.3; (grub-client-1.5.3; Crawl your own stuff with http://grub.org)

1

0.00%

firfox

1

0.00%

everyfeed-spider/2.0 (http://www.everyfeed.com)

1

0.00%

axios/1.8.4

1

0.00%

WebCopier v4.6

1

0.00%

WanderBot/0.1 (+web discovery)

1

0.00%

WP-Safe-Scanner/2.0

1

0.00%

W3C_Validator/1.305.2.12 libwww-perl/5.64

1

0.00%

The Network Search Identity Evaluator

1

0.00%

SonyEricssonW995/R1EA Profile/MIDP-2.1 Configuration/CLDC-1.1 UNTRUSTED/1.0

1

0.00%

SonyEricssonT68/R201A

1

0.00%

SonyEricssonS500i/R6BC Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1

1

0.00%

SonyEricssonK750i/R1CA Browser/SEMC-Browser/4.2 Profile/MIDP-2.0 Configuration/CLDC-1.1

1

0.00%

Sift/1.0 (+https://sift.ing)

1

0.00%

SSLVPN-Client/3.0

1

0.00%

SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1

1

0.00%

OttoKit

1

0.00%

OrchardFeedCrawler-1.0

1

0.00%

Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.16823/1428; U; en) Presto/2.2.0

1

0.00%

Offline Explorer/2.5

1

0.00%

NFHN Reader (https://nfhn.netlify.app)

1

0.00%

Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; iAskBot/1.0; +https://iask.ai/) Chrome/124.0.6367.171 Safari/605.1.15

1

0.00%

Mozilla/5.0 (l9scan/2.0.26335683a3a3030323a3430343a303461343a313030323; +https://leakix.net)

1

0.00%

Mozilla/5.0 (curie-scraping/1.0; +research)

1

0.00%

Mozilla/5.0 (compatible; theoldreader.com; support@theoldreader.com)

1

0.00%

Mozilla/5.0 (compatible; myjob/1.0)

1

0.00%

Mozilla/5.0 (compatible; feed-reader/1.0)

1

0.00%

Mozilla/5.0 (compatible; blogmasta-harvester/1.0; +https://example.com/bot)

1

0.00%

Mozilla/5.0 (compatible; archive.org_bot; Wayback Machine Live Record; +http://archive.org/details/archive.org_bot)

1

0.00%

Mozilla/5.0 (compatible; archive.org_bot +http://www.archive.org/details/archive.org_bot)

1

0.00%

Mozilla/5.0 (compatible; alexa site audit/1.0; +http://www.alexa.com/help/webmasters; )

1

0.00%

Mozilla/5.0 (compatible; RTSP-Scanner/1.0)

1

0.00%

Mozilla/5.0 (compatible; IPScanner/1.0)

1

0.00%

Mozilla/5.0 (compatible; FeedAnalyzer/1.0)

1

0.00%

Mozilla/5.0 (adaptive-bot)

1

0.00%

Mozilla/5.0 (PMTA-Auto)

1

0.00%

Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0

1

0.00%

Mozilla/5.0 (OS/2; Warp 4.5; rv:38.0) Gecko/20100101 Firefox/38.0 SeaMonkey/2.35

1

0.00%

Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0 SeaMonkey/2.21

1

0.00%

Mozilla/5.0 (OS/2; U; OS/2; en-US) AppleWebKit/533.3 (KHTML, like Gecko) Arora/0.11.0 Safari/533.3

1

0.00%

Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20060702 SeaMonkey/1.5a

1

0.00%

Mozilla/4.77 [en] (X11; I; IRIX;64 6.5 IP30)

1

0.00%

Mozilla/4.0 (compatible; MSIE 5.0; Series80/2.0 Nokia9500/4.51 Profile/MIDP-2.0 Configuration/CLDC-1.1)

1

0.00%

Mozilla/4.0 (compatible; Dillo 3.0)

1

0.00%

Mozilla/4.0 (PDA; PalmOS/sony/model prmr/Revision:1.1.54 (en)) NetFront/3.0

1

0.00%

Mozilla/2.0 (compatible; Ask Jeeves/Teoma)

1

0.00%

Mozilla/1.22 (compatible; MSIE 5.01; PalmOS 3.0) EudoraWeb 2.1

1

0.00%

Microsoft URL Control - 6.00.8862

1

0.00%

Mattermost-Bot/1.1

1

0.00%

MOT-L7v/08.B7.5DR MIB/2.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0

1

0.00%

M

1

0.00%

LinkupBot/1.0 (LinkupBot for web indexing; https://linkup.so/bot; bot@linkup.so)

1

0.00%

KiroIDE/0.12.318

1

0.00%

Java/1.6.0_13

1

0.00%

HomePage-Crawler/1.0

1

0.00%

Gregarius/0.5.2 ( http://devlog.gregarius.net/docs/ua)

1

0.00%

Google-Jetski-Antigravity

1

0.00%

GitHubCopilotRuntime-WebFetch

1

0.00%

FeedFetcher-Google; ( http://www.google.com/feedfetcher.html)

1

0.00%

EmailWolf 1.00

1

0.00%

ELinks/0.12~pre5-4

1

0.00%

Download Demon/3.5.0.11

1

0.00%

CirgloBot/1.0.0+65075204b297956cece4a08c94ee8c1da46d82b4 (+https://cirglo.com/bot; RSS feed reader)

1

0.00%

Apache-HttpClient/4.5.14 (Java/11.0.20.1)

1

0.00%

Adobe Application Manager 2.0

1

0.00%

Unsurprisingly the vast majority of bots are AI or search engine crawlers.

The first bot is ChatGPT (OpenAI) accounting for 14% of the total.

I am pleased to see that NextCloud-News is in second place, accounting for 8%. NextCloud-News is an RSS/Atom Feed reader App for Nextcloud. This is not surprising, given that my blog provides an RSS feed at https://blog.apdu.fr/rss.xml. NextCloud is a great Free Software project. I use it and I am very happy with it.

Feedly News Reader is in the third place with 8%. Feedly News Reader is also an RSS aggregator.

This means that 8% + 8% = 16% of the bot requests are actually for real humans that use an RSS client application.

Then PetalBot, Amazonbot and Qwantbot are next with 5%.

IPv6

Version

#

%

IPv4

145,979

89.86%

IPv6

16,465

10.14%

There are even fewer IPv6 requests than for https://ccid.apdu.fr/.

Perhaps search indexers and AI companies are only using old technologies. Perhaps they are unaware that IPv6 is specified since the previous millennium.

Conclusion

There is a lot of traffic generated by AI bots. I suppose they prefer the text on my blog more to the source code on my CCID driver website. The server is far from being overloaded. I don't need to take countermeasures like Anubis.

16% of the requests are for RSS client applications. If you don't use RSS yet, I suggest reading RSS feed for my blog.

Some web statistics about ccid.apdu.fr

Now that I have moved my blog from Blogspot to my own server (see Blog moved to https://blog.apdu.fr/) I am now able to analyse the web server logs for https://ccid.apdu.fr/.

I used the logs from June 2026.

The server received a total of 269,860 requests. This equates to 8,995 requests per day, or 6.2 requests per minute. This is a very small website.

All requests

I used the user_agents Python module to extract the system family.

Surprisingly Windows comes first with 28%, even though the website is for a Unix smart card reader driver. There is nothing for Windows users on https://ccid.apdu.fr/.

Second is 'Other' (22%). They are bots. More on that later.

Third is the expected Linux (with only 21%), which is the core target audience.

OS

#

%

Windows

76444

28.33%

Other

60525

22.43%

Linux

57642

21.36%

Mac OS X

28497

10.56%

Android

27549

10.21%

Chrome OS

6973

2.58%

Ubuntu

6092

2.26%

iOS

3852

1.43%

Unknown

2143

0.79%

Debian

42

0.02%

OpenBSD

30

0.01%

NetBSD

26

0.01%

FreeBSD

8

0.00%

Symbian OS

7

0.00%

CentOS

7

0.00%

Windows Phone

3

0.00%

Fedora

3

0.00%

Solaris

2

0.00%

Slackware

2

0.00%

Kubuntu

2

0.00%

Kindle

2

0.00%

BlackBerry OS

2

0.00%

webOS

1

0.00%

openSUSE

1

0.00%

Symbian^3

1

0.00%

Roku

1

0.00%

Maemo

1

0.00%

BSD

1

0.00%

BREW

1

0.00%

Bots

22% of the requests fall into the 'Other' category. These are bots, and not human users.

The first bot is related to Rivian. If I am correct, Rivian is an electric car manufacturer. I don't know why they need to contact my website 15 times an hour.

Wget, cURL, Amazonebot, Meta and ChatGPT are more expected.

OS

#

%

rivian-firmware-build/1.0 (https://gitlab.rivianvw.io/core/firmware)

10984

18.15%

Wget/1.25.0

8555

14.13%

curl/8.18.0

4704

7.77%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36

4610

7.62%

meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

3967

6.55%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot

2394

3.96%

Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)

1957

3.23%

TLM-Audit-Scanner/1.0

1908

3.15%

Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)

1416

2.34%

Baiduspider-image+(+http://www.baidu.com/search/spider.htm)

1298

2.14%

Go-http-client/1.1

1068

1.76%

Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)

1028

1.70%

amazon-Quick-on-behalf-of-03b1f1a7

831

1.37%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)

821

1.36%

Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)

761

1.26%

Mozilla/5.0 (X11; compatible; semantic-visions.com crawler; HTTPClient 4.5)

754

1.25%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; SleepBot/1.0; +http://sleepbot.com/) Chrome/131.0.0.0 Safari/537.36

752

1.24%

amazon-Quick-on-behalf-of-24c5991b

699

1.15%

Mozilla/5.0 (compatible; IbouBot/1.0; +bot@ibou.io; +https://ibou.io/iboubot.html)

591

0.98%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36

563

0.93%

Mozilla/5.0 (compatible; crawler)

553

0.91%

Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)

551

0.91%

Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)

533

0.88%

Googlebot-Image/1.0

532

0.88%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GoogleOther) Chrome/148.0.7778.96 Safari/537.36

522

0.86%

Python-urllib/3.10

510

0.84%

Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)

454

0.75%

Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)

444

0.73%

Mozilla/5.0 (compatible; SeekportBot; +https://bot.seekport.com)

428

0.71%

Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15

376

0.62%

Mozilla/5.0...

339

0.56%

Mozilla/5.0 (compatible; Qwantbot/1.0; +https://help.qwant.com/bot/)

317

0.52%

Anitya 2.2.2 at release-monitoring.org

305

0.50%

Chrome Privacy Preserving Prefetch Proxy

292

0.48%

Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)

206

0.34%

DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)

206

0.34%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ReyilBot/0.1

198

0.33%

facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)

178

0.29%

Mozilla/5.0 (compatible; pathscan/1.0)

177

0.29%

DominicBot/1.0 (+https://vanylla.org/bot)

164

0.27%

Turnitin (https://bit.ly/2UvnfoQ)

151

0.25%

DuckAssistBot/1.2; (+http://duckduckgo.com/duckassistbot.html)

146

0.24%

Version-Tracker

144

0.24%

Claude-User (claude-code/2.1.197; +https://support.anthropic.com/)

136

0.22%

Mozilla/5.0 (compatible; YandexRenderResourcesBot/1.0; +http://yandex.com/bots) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0

131

0.22%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)

128

0.21%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36

124

0.20%

Mozilla/5.0 (l9scan/2.0.3313e27393e21393e21353; +https://leakix.net)

120

0.20%

com.apple.WebKit.Networking/21623.2.7.11.7 Network/5569.81.5 macOS/26.3.1

114

0.19%

portroach/

113

0.19%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)

98

0.16%

fetch libfetch/2.0

83

0.14%

Scrapy/2.16.0 (+https://scrapy.org)

76

0.13%

Python/3.12 aiohttp/3.13.3

76

0.13%

portscout/0.8.1

70

0.12%

Mozilla/5.0 (compatible; bitbake)

70

0.12%

Mozilla/5.0 (compatible; SeznamBot/4.0; +https://o-seznam.cz/napoveda/vyhledavani/en/seznambot-crawler/)

70

0.12%

Mozilla/5.0 (compatible; WebGameGameExternalAudit/1.0; +https://webgamegame.win/)

68

0.11%

s4-updater/1.0

66

0.11%

python-requests/2.25.1

66

0.11%

xbps-src-update-check/113

64

0.11%

cbuild-update-check/4.20.69

64

0.11%

wl-checknewreleases/1.0.21

63

0.10%

CCBot/2.0 (https://commoncrawl.org/faq/)

63

0.10%

Desoutter/1.0 (benoit.marembert@cp.com)

57

0.09%

PTXdist 2024.12.0

53

0.09%

flatpak-builder 1.2.2

50

0.08%

Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)

48

0.08%

ClueWeb-Crawler/1.0 (+https://boston.lti.cs.cmu.edu/CMU-ClueWeb-Crawler/; mailto:cmu-clueweb-crawler@andrew.cmu.edu)

48

0.08%

Mozilla/5.0

44

0.07%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ShapBot/0.1.0

42

0.07%

Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)

40

0.07%

OWLer

39

0.06%

python-httpx/0.28.1

38

0.06%

SEBot-WA

36

0.06%

Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots)

36

0.06%

YoctoProject/Bitbake/1.0

35

0.06%

Mozilla/5.0 (compatible; Hister/v0.15.0 (6c51924); +https://hister.org/)

32

0.05%

Mozilla/5.0 (compatible; CT-WP-Scanner/1.0; +https://example.com/bot)

27

0.04%

cargo

25

0.04%

Lynx/2.9.3 libwww-FM/2.14 SSL-MM/1.4.1 OpenSSL/3.6.2

23

0.04%

pc

19

0.03%

Mozilla/5.0 (compatible; HostQuality/1.0)

19

0.03%

Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)

18

0.03%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; AzureAI-SearchBot/1.0;

17

0.03%

Tricorder-Copyright-Collector/1.0

15

0.02%

7Siters/1.2 ( https://7ooo.ru/siters/ )

15

0.02%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)

14

0.02%

meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

13

0.02%

Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)

13

0.02%

Exabot

12

0.02%

node

11

0.02%

anthropic-ai

11

0.02%

Mozilla/5.0 (compatible; VelenPublicWebCrawler/1.0; +https://velen.io)

11

0.02%

Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)

11

0.02%

DomainStatsBot/1.0 (https://domainstats.com/pages/our-bot)

10

0.02%

okhttp/5.3.0

9

0.01%

Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity

9

0.01%

FireFox

9

0.01%

Mozilla/5.0 (keys-so-bot)

8

0.01%

Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)

8

0.01%

gwf-carbon-txt-crawler/1.0 (Web Crawler for the GreenSoftwareFoundation to measure the adoption of the carbon.txt initiative; https://carbontxt.org/; crawler@carbontxt.org)

7

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot

7

0.01%

Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)

7

0.01%

Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)

7

0.01%

Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.0.0 Safari/537.36

7

0.01%

Mozilla/5.0 (compatible; Bytespider; spider-feedback@bytedance.com)

7

0.01%

CyberSitemapRepositoryBot/0.1 (research crawler; replace contact in scripts/crawl_validate.py)

7

0.01%

AteveSearchSourceUrlDiscovery/0.1 (+mailto:crawler@example.com)

7

0.01%

SummalyBot/5.2.2

6

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bravebot/1.0; +https://search.brave.com/help/brave-search-crawler) Chrome/W.X.Y.Z Safari/537.36

6

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0

6

0.01%

Mozilla/5.0 (compatible; intelx.io_bot +https://intelx.io)

6

0.01%

Mozilla/5.0 (compatible; MojeekBot/0.11; +https://www.mojeek.com/bot.html)

6

0.01%

Mozilla/5.0 (compatible; HubSeedsBot/1.0)

6

0.01%

Mozilla/5.0 (compatible; DomainExtractor/1.0)

6

0.01%

rpmdev-spectool

5

0.01%

imgproxy/3.30.0

5

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36

5

0.01%

Mozilla/5.0 (compatible; YaK/1.0; http://linkfluence.com/; bot@linkfluence.com)

5

0.01%

BrightEdge Crawler/1.0 (crawler@brightedge.com)

5

0.01%

AIWebIndex/2.0 (+https://lyrenth.com/bot; AI-readable web index)

5

0.01%

lftp/4.9.3

4

0.01%

gwf-carbon-txt-crawler/1.0 (Web Crawler for the Green Software Foundation to measure the adoption of the carbon.txt initiative; https://carbontxt.org/; support@greenweb.org)

4

0.01%

blh-scanner/1.0 (+authorized security research)

4

0.01%

WhatsApp/2.23.20.0

4

0.01%

SecurityAudit/1.0

4

0.01%

NVBot

4

0.01%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; YouBot/1.0; +https://docs.you.com/youbot; env:prod) Chrome/142.0.0.0 Safari/537.36

4

0.01%

Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)

4

0.01%

Mozilla/5.0 (compatible; SecurityResearch/1.0; )

4

0.01%

Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)

4

0.01%

Java/1.8.0_171

4

0.01%

win10chrome117

3

0.00%

ttcontrol-yocto-build/1.0 (builder-fusion@ttcontrol.com)

3

0.00%

amilabs-interleaved-research/0.1 (sanghyun@amilabs.xyz)

3

0.00%

SonyEricssonK310iv/R4DA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.1.13.0

3

0.00%

Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Aranet-SearchBot/1.0; +https://aranet.ai/bot) Chrome/131.0.0.0 Safari/537.36

3

0.00%

Mozilla/5.0 (compatible; special_archiver/3.11.1; +https://archive.org/details/archive.org_bot)

3

0.00%

Mozilla/5.0 (compatible; SBIntuitionsBot/0.1; +https://www.sbintuitions.co.jp/bot/)

3

0.00%

Mozilla/5.0 (compatible) SemanticScholarBot (+https://www.semanticscholar.org/crawler)

3

0.00%

Mozilla/5.0 (compatible)

3

0.00%

Mozilla

3

0.00%

Misskey/2025.4.7 (https://social.louis-vallat.dev/)

3

0.00%

Misskey/2025.4.7 (https://shork.social/)

3

0.00%

Iframely/1.3.1 (+https://iframely.com/docs/about) Atlassian

3

0.00%

INETDEX-BOT/2.0 (https://inetdex.com/bot.php)

3

0.00%

GoogleOther

3

0.00%

Google-Lens

3

0.00%

yocto-imx8mp-build (rc@example.com)

2

0.00%

kagi-fetcher/1.0

2

0.00%

imx-yocto-build/1.0 (contact: local-build)

2

0.00%

fyndbot (robots; https://fynd.bot)

2

0.00%

forager/1.0 (+https://codeberg.org/atomdrift/forager)

2

0.00%

efx-yocto-build

2

0.00%

amazon-kendra

2

0.00%

XenForo/2.x (https://www.bsdforen.de)

2

0.00%

Timpibot/1.0 (+http://timpi.io/crawler)

2

0.00%

TelegramBot (like TwitterBot)

2

0.00%

SnipeSearchBot/Nutch-1.22

2

0.00%

ShorkBot/0.1 (small search engine crawler)

2

0.00%

Screaming Frog SEO Spider/24.0

2

0.00%

RootEvidence/1.0

2

0.00%

Observer/1.0 (+https://obsrvr.net/about; crawler@obsrvr.net)

2

0.00%

Mozilla/5.0 crawler

2

0.00%

Mozilla/5.0 (curator-mass-export)

2

0.00%

Mozilla/5.0 (compatible; myjob/1.0)

2

0.00%

Mozilla/5.0 (compatible; YandexFavicons/1.0; +http://yandex.com/bots)

2

0.00%

Mozilla/5.0 (compatible; Timpibot/0.8; +http://www.timpi.io)

2

0.00%

Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)

2

0.00%

Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)

2

0.00%

Mozilla/5.0 (compatible; HaloBot/1.0)

2

0.00%

Mozilla/5.0 (compatible; Google-Site-Verification/1.0)

2

0.00%

Mozilla/5.0 (compatible; AffsignalCrawler/1.0; +https://affsignal.com/bot)

2

0.00%

Mozilla/4.0 (compatible; MSIE 5.0; Series80/2.0 Nokia9500/4.51 Profile/MIDP-2.0 Configuration/CLDC-1.1)

2

0.00%

Deno/2.3.1

2

0.00%

BanglaBot/1.0 (+https://xn--54b7fta0cc.com/bot)

2

0.00%

ArenaUnfurlBot/1.0 (Link preview bot for AI model comparison platform; +https://arena.ai) Mozilla/5.0 (compatible)

2

0.00%

yocto-build

1

0.00%

wl-download/1.0.24

1

0.00%

webtech/1.3.4

1

0.00%

vercel-image-optimization/1.0

1

0.00%

undici

1

0.00%

ucve-finder/1.0 (research@vyprsec.ai)

1

0.00%

senthor-robots-research/1.0 (+https://senthor.io; audits public robots.txt for AI-access analytics)

1

0.00%

sbom-source-hash-verifier/1.0

1

0.00%

rag/1.0

1

0.00%

qi ye wei xin/5.0.8 (Mac OS X ban ben26.5(ban hao25F71))

1

0.00%

python-urllib3/1.26.9

1

0.00%

programbench-miner/0.1

1

0.00%

portalmmm/2.0 N410i(c20;TB)

1

0.00%

pimeyes-downloader-api/0.1

1

0.00%

msnbot-media/1.1 ( http://search.msn.com/msnbot.htm)

1

0.00%

meta-externalads/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)

1

0.00%

iwg50m-imx91-yocto-build (jslemaire@esmartcontrol.net)

1

0.00%

imx8mp-yocto-build/1.0 (contact: ban@example.com)

1

0.00%

hrepo-bfd/0.2 source-cache

1

0.00%

firefox

1

0.00%

facebookscraper/1.0( http://www.facebook.com/sharescraper_help.php)

1

0.00%

autospec/1.0

1

0.00%

apt-qa

1

0.00%

WhatsApp/2

1

0.00%

Web Downloader/6.9

1

0.00%

WP-Safe-Scanner/2.0

1

0.00%

Vodafone/1.0/V802SE/SEJ001 Browser/SEMC-Browser/4.1

1

0.00%

SonyEricssonZ800/R1Y Browser/SEMC-Browser/4.1 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.0.0.0

1

0.00%

SonyEricssonT68/R201A

1

0.00%

SonyEricssonS500i/R6BC Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1

1

0.00%

ServiceNow/1.0

1

0.00%

SEMrushBot

1

0.00%

SEC-SGHE900/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 Opera/8.01 (J2ME/MIDP; Opera Mini/2.0.4509/1378; nl; U; ssr)

1

0.00%

S33DBot/4.0 (+https://s33d.fr/bot)

1

0.00%

RecordedFuture Global Inventory Crawler

1

0.00%

PLD/distfiles

1

0.00%

PLD/Builder(v0.35)

1

0.00%

Opera/9.60 (J2ME/MIDP; Opera Mini/4.2.14320/554; U; cs) Presto/2.2.0

1

0.00%

Nokia6100/1.0 (04.01) Profile/MIDP-1.0 Configuration/CLDC-1.0

1

0.00%

Nextcloud-Server-Crawler/33.0.3

1

0.00%

NetAPI v1

1

0.00%

Mozilla/5.0 (en-us) AppleWebKit/525.13 (KHTML, like Gecko; Google Web Preview) Version/3.1 Safari/525.13

1

0.00%

Mozilla/5.0 (compatible; archive.org_bot; Wayback Machine Live Record; +http://archive.org/details/archive.org_bot)

1

0.00%

Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)

1

0.00%

Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)

1

0.00%

Mozilla/5.0 (compatible; SurdotlyBot/1.0; +http://sur.ly/bot.html)

1

0.00%

Mozilla/5.0 (compatible; SiteProber/1.0; +https://example.com/bot)

1

0.00%

Mozilla/5.0 (compatible; PD12M-downloader/1.0)

1

0.00%

Mozilla/5.0 (compatible; Konqueror/4.1; DragonFly) KHTML/4.1.4 (like Gecko)

1

0.00%

Mozilla/5.0 (compatible; GitFinder/1.0)

1

0.00%

Mozilla/5.0 (compatible; EngagemiiAcquisitionBot/1.0; +https://engagemii.com)

1

0.00%

Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)

1

0.00%

Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0 SeaMonkey/2.21

1

0.00%

Mozilla/5.0 (OS/2; U; OS/2; en-US) AppleWebKit/533.3 (KHTML, like Gecko) QupZilla/1.3.1 Safari/533.3

1

0.00%

Mozilla/4.77 [en] (X11; I; IRIX;64 6.5 IP30)

1

0.00%

Mozilla/4.0 (PSP (PlayStation Portable); 2.00)

1

0.00%

Mozilla/3.0 (compatible; NetPositive/2.1.1; BeOS)

1

0.00%

LinkupBot/1.0 (LinkupBot for web indexing; https://linkup.so/bot; bot@linkup.so)

1

0.00%

Java/1.6.0_13

1

0.00%

Iframely/1.3.1 (+https://iframely.com/docs/about)

1

0.00%

Hatena::Scissors/0.01

1

0.00%

Google-Jetski-AIStudio/1.0

1

0.00%

Google

1

0.00%

GitHubCopilotRuntime-WebFetch

1

0.00%

DefaultLangchainUserAgent

1

0.00%

Bun/1.3.14

1

0.00%

BuildStream/2

1

0.00%

BitBake

1

0.00%

Avant Browser/1.2.789rel1 (http://www.avantbrowser.com)

1

0.00%

Aidentify latest-version verifier

1

0.00%

AdsBot-Google ( http://www.google.com/adsbot.html)

1

0.00%

"Mozilla/5.0"

1

0.00%

404 Not Found

I also get a lot of 404 Not Found errors.

#

File

1492

/files/ccid-1.4.33.tar.bz2

775

/files/ccid-1.5.5.tar.bz2

292

/.well-known/traffic-advice

156

/sitemap.xml

107

/apple-touch-icon.png

104

/apple-touch-icon-precomposed.png

78

/.env

59

/ip

46

/.git/config

45

/ads.txt

43

/files/ccid-1.5.2.tar.bz2

30

/files/ccid-1.6.2.tar.xz

30

/files/ccid-1.5.0.pkg

28

/files/$%7Bpkgname

27

/config.json

26

/info/refs?service=git-upload-pack

26

/.env.local

24

/info.php

24

/files/ccid-1.7.0.tar.xz

24

/.aws/credentials

...

...

ccid-1.4.33

The file /files/ccid-1.4.33.tar.bz2 was fetched by "rivian-firmware-build/1.0 (https://gitlab.rivianvw.io/core/firmware)" at 90%, and then by Wget at 9%.

At the end of June 2026, I decided to remove the old versions of the source code archives. I don't think it is a good idea to provide artificial intelligence companies with old versions of my software (that may contain bugs).

It appears that Rivian is using my driver, in version 1.4.33, which was released in June 2020, and tries to fetch it repeatedly. They now receive a 404 error instead of the file contents.

ccid-1.5.5

I don't know why the version 1.5.5 (released in January 2024) is so popular.

According to the logs, this version is fetched by Wget for 89% of the time, curl 8% of the time and bitbake 1% of the time.

I don't know who is using this 'old' version of the CCID driver. In fact I could find out, as I have the IP addresses of the clients in the logs.

parse tool

The CCID driver contains a tool that can parse the USB CCID descriptor. This is mandatory if you want to add a new reader to the lists.

Instead of building the driver from the source code I also provide pre-compiled binaries of the parse tool.

The command to use is:

curl https://ccid.apdu.fr/files/parse.sh | bash -

From the log I can see that there were 50 accesses to the parse.sh shell script and 23 accesses to the Linux-x86_64 binary, but none to any of the other architectures I provide.

file/arch

#

parse.sh

50

Linux-x86_64

23

Linux-aarch64

0

Linux-armv7l

0

Darwin-arm64

0

Darwin-x86_64

0

The requests came from 8 different IP addresses. Therefore, only 8 users have used this service in June 2026.

IPv6

The old Internet Protocol is still widely used. However, only 19% of the requests use the current, modern version: IPv6.

Version

#

%

IPv4

217489

80.59%

IPv6

52371

19.41%

According to Google's IPv6 statistics the figure should be around 50% for each protocol.

I have no explanation for that discrepancy.

Conclusion

I was expecting to receive more requests from GNU/Linux systems.

I was also expecting more requests from bots, such as AI and search engines. According to 2026 Edition Thales Bad Bot Report "53% The percentage of internet traffic made up of bots.".

I am surprised to see requests for outdated versions of the CCID driver.

Enabling contactless Broadcom readers

Current status

Some Dell laptops have a Broadcom smart card reader. Some readers are for contact cards and some are for contactless cards. Contact readers should work fine with my CCID driver and are listed in the Should work but untested by me list.

However, none of the contactless readers are supported by my driver and are in the Unsupported or partly supported CCID readers.

Example with a Dell Latitude 7350

$ lsusb
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 002: ID 0bda:557e Realtek Semiconductor Corp. Integrated_Webcam_FHD
Bus 003 Device 003: ID 0a5c:5865 Broadcom Corp. 58200
Bus 003 Device 004: ID 8087:0036 Intel Corp. BE200 Bluetooth
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub

The reader found is this Broadcom Corp. 58200 (USB idProduct = 0x5865).

My CCID driver web page indicates for this reader: The contactless interface is not supported.

$ pcsc_scan
PC/SC device scanner
V 1.7.5 (c) 2001-2026, Ludovic Rousseau <ludovic.rousseau@free.fr>
Using reader plug'n play mechanism
Scanning present readers...
0: Broadcom Corp 58200 [Contacted SmartCard] (0123456789ABCD) 00 00
1: Broadcom Corp 58200 [Contactless SmartCard] (0123456789ABCD) 01 00

Sat Jul  4 17:40:42 2026
 Reader 0: Broadcom Corp 58200 [Contacted SmartCard] (0123456789ABCD) 00 00
  Event number: 0
  Card state: Card removed,
 Reader 1: Broadcom Corp 58200 [Contactless SmartCard] (0123456789ABCD) 01 00
  Event number: 0
  Card state: Card removed,
Insert or remove a card or a reader...

My CCID driver finds and reports both readers/interfaces. However, only the contact reader reports card insertion and removal and can use a card.

The readers are a composite device with two CCID interfaces: "Contacted SmartCard" and "Contactless SmartCard". The device also has an interface labelled "Broadcom ControlVault 3+ w/FingerPrint" and another labelled "Broadcom NFP" (NFP stands for "Near Field Proximity").

Electromagnetic field

The contactless reader does not detect the presence of a card because its electromagnetic field is inactive.

I have a special detector that tells me when a contactless reader is, or isn't, emitting an electromagnetic field. And I see no activity at all.

Broadcom NFC service

Broadcom provides a (proprietary) program at https://packages.broadcom.com/artifactory/dell-controlvault-drivers/

The current version is brcm_linux_nfc_6.4.23.tgz.

$ tar tzvf brcm_linux_nfc_6.4.23.tgz
-rwxrwxr-x adminuser/adminuser 1427144 2026-05-01 00:48 usr/lib/broadcom-nfc/bcmnfcd.bin
-rw-rw-r-- adminuser/adminuser   26117 2026-05-01 00:48 usr/lib/broadcom-nfc/bcmnfcd.conf
-r-xr-xr-x adminuser/adminuser     155 2026-05-01 00:48 filelist
-r-xr-xr-x adminuser/adminuser     961 2026-05-01 00:48 install.sh
-r-xr-xr-x adminuser/adminuser      83 2026-05-01 00:48 rm.sh
-r-xr-xr-x adminuser/adminuser     249 2026-05-01 00:48 etc/systemd/system/broadcom-nfc.service
-r-xr-xr-x adminuser/adminuser     157 2026-05-01 00:48 lib/systemd/system-sleep/bcmnfcd-control.sh
-r-xr-xr-x adminuser/adminuser    2098 2026-05-01 00:48 readme.txt
-r-xr-xr-x adminuser/adminuser    4325 2026-05-01 00:48 LICENSE.broadcom

Supported readers

Only Broadcom readers using a CV3+ chip (or later) are supported by the Broadcom NFC service to enable the contactless interface.

Older readers using a CV3 chip will not work.

Remember the interface name of the non-CCID interface: "Broadcom ControlVault 3+ w/FingerPrint"? "ControlVault 3+" refers to the CV3+ chip, so this reader is compatible.

Readme

Extract from the readme.txt file:

===========================================================
                         Broadcom NFC Daemon for Linux
===========================================================


================
DESCRIPTION
================

This package is a Linux based package to install Broadcom NFC daemon.  The NFC
daemon runs and NFC stack needed to initialize and keep the state of the NFC
controller of the CV device.  The sole purpose of this NFC stack is to enable
the Contactless CCID interface.

It is assumed higher level software such as PCSC Lite will be used in
conjunction with the NFC daemon.

[...]

Installation

After installation, the process bcmnfcd.bin is running:

$ systemctl status broadcom-nfc.service
● broadcom-nfc.service - Broadcom NFC service
         Loaded: loaded (/etc/systemd/system/broadcom-nfc.service; enabled; preset: enabled)
         Active: active (running) since Sat 2026-07-04 13:19:07 CEST; 1min 19s ago
 Invocation: 45b58a953ed54891a3b7d3c167502c39
   Main PID: 9271 (bcmnfcd.bin)
          Tasks: 6 (limit: 18475)
         Memory: 2.5M (peak: 3.5M)
                CPU: 48ms
         CGroup: /system.slice/broadcom-nfc.service
                         └─9271 /usr/lib/broadcom-nfc/bcmnfcd.bin -d -f -c /usr/lib/broadcom-nfc/

Use

And it is now possible to detect and use contactless smart cards.

$ pcsc_scan
PC/SC device scanner
V 1.7.3 (c) 2001-2024, Ludovic Rousseau <ludovic.rousseau@free.fr>
Using reader plug'n play mechanism
Scanning present readers...
0: Broadcom Corp 58200 [Contacted SmartCard] (0123456789ABCD) 00 00
1: Broadcom Corp 58200 [Contactless SmartCard] (0123456789ABCD) 01 00

Sat Jul  4 13:21:48 2026
 Reader 0: Broadcom Corp 58200 [Contacted SmartCard] (0123456789ABCD) 00 00
  Event number: 0
  Card state: Card removed,
 Reader 1: Broadcom Corp 58200 [Contactless SmartCard] (0123456789ABCD) 01 00
  Event number: 4
  Card state: Card removed,

Sat Jul  4 13:21:50 2026
 Reader 1: Broadcom Corp 58200 [Contactless SmartCard] (0123456789ABCD) 01 00
  Event number: 5
  Card state: Card inserted,
  ATR: 3B 8F 80 01 80 91 00 31 80 65 B0 84 05 00 25 83 01 90 00 CD

ATR: 3B 8F 80 01 80 91 00 31 80 65 B0 84 05 00 25 83 01 90 00 CD
+ TS = 3B --> Direct Convention
+ T0 = 8F, Y(1): 1000, K: 15 (historical bytes)
  TD(1) = 80 --> Y(i+1) = 1000, Protocol T = 0
-----
  TD(2) = 01 --> Y(i+1) = 0000, Protocol T = 1
-----
+ Historical bytes: 80 91 00 31 80 65 B0 84 05 00 25 83 01 90 00
  Category indicator byte: 80 (compact TLV data object)
        Tag: 9, len: 1 (unknown)
          Value: 00
        Tag: 3, len: 1 (card service data byte)
          Card service data byte: 80
                - Application selection: by full DF name
                - EF.DIR and EF.ATR access services: by GET RECORD(s) command
                - Card with MF
        Tag: 6, len: 5 (pre-issuing data)
          Data: B0 84 05 00 25
        Tag: 8, len: 3 (status indicator)
          LCS (life card cycle): 01 (Creation state)
          SW: 9000 (Normal processing.)
+ TCK = CD (correct checksum)

Possibly identified card (using /home/ludovic/.cache/smartcard_list.txt):
3B 8F 80 01 80 91 00 31 80 65 B0 84 05 00 25 83 01 90 00 CD
        Contactless IDCore3230 build 6.8, test APDU applet (JavaCard)

If you stop the /usr/lib/broadcom-nfc/bcmnfcd.bin process then the contactless reader is disabled again.

The process does more than just initialise the contactless reader.

License

Extract from the LICENSE.broadcom file:

Copyright: Copyright © 2005-2023 Broadcom. All Rights Reserved.
The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.
License: Proprietary
[...]

The program is proprietary. The source code is not provided.

I understand this can be problematic. A Free Software solution would be preferable.

If you want to use a contactless reader that works without a non-free "driver" you can use one from the supported list or check the contactless support if you use a reader from the should work list.

I note that, in order to use the Wi-Fi card on this laptop, I need to install the package firmware-iwlwifi which comes from the Debian non-free-firmware repository. This is a similar issue, except that for the non-free program for the contactless reader runs on the main CPU rather than the Wi-Fi card CPU.

Conclusion

Broadcom provides a program that enables the use of the contactless readers.

It is not perfect, since the license is NOT Free Software. However, it does allow you to use the contactless reader if you really need to.

New version of libccid: 1.8.2

I have just released version 1.8.2 of libccid the Free Software CCID class smart card reader driver.

This version resolves an issue that was introduced in version 1.8.1, which was released three days ago. Composite devices (devices with both a CCID interface and also another interface, such as HID) were not being handled correctly. Yubico Yubikey tokens, for example, are often composite devices.

Thank you

Less than three days after the release of version 1.8.1, I received three bug reports concerning an issue with Yubikey tokens.

The bug reports either contain the problematic Git commit or a proposed patch to solve the problem. That was surprising.

I realise that bug reports are the main way of finding out whether people are using my software. Perhaps I should introduce more bugs to prompt a reaction? 😏

You can also email me to let me know that everything is working fine and that you are happy. My contact details can be found on the About me page.

Changes:

1.8.2 - 13 June 2026, Ludovic Rousseau

  • Fix initialisation of composite devices (like Yubico tokens)

  • Correctly close the slots of a multi-slots reader (serial)

New version of libccid: 1.8.1

I just released version 1.8.1 of libccid the Free Software CCID class smart card reader driver.

This version fixes an issue with multi-slots readers.

Changes:

1.8.1 - 10 June 2026, Ludovic Rousseau

  • Correctly close the slots of a multi-slots reader

  • Fix 3 minor issues "Found by AISLE in partnership with Red Hat"

  • Some other minor improvements

New version of pcsc-lite: 2.5.1

I have just released a new version of pcsc-lite 2.5.1.

pcsc-lite is a Free Software implementation of the PC/SC (also known as WinSCard) API for Unix systems. It provides an API for using smart cards and smart card readers.

This version contains a bug fix for multi-slots readers. The bug was introduced in the previous version 2.5.0 released 2 weeks ago.

Changes:

2.5.1: Ludovic Rousseau

10 June 2026

  • Fix a bug (introduced in 2.5.0) with multi-slots readers

  • Add support of Haiku Operating System

New version of pcsc-tools: 1.7.5

I just released a new version of pcsc-tools, a suite of tools for PC/SC.

Changes:

1.7.5 - 3 June 2026, Ludovic ROUSSEAU

  • 102 new ATRs

  • pcsc_scan:

    • fix an infinite loop

    • do not crash if SCardEstablishContext() fails

    • do not wait for an non-started thread

    • handle the case of an error during SCardGetStatusChange

  • meson: use -DATRparser="" to disable the ATR parser

  • gscriptor: Add Georgian translation

  • minor fixes and improvements