Prevent Bot Registration using Botscout v.0.0.2

Prevent Bot Registration using Botscout

  1. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    pani100 submitted a new resource:

    Prevent Bot Registration using Botscout - Prevent Bot Registration using Botscout

    Read more about this resource...
     
    Last edited by a moderator: Apr 2, 2016
  2. david62311

    david62311 Well-Known Member

    Joined:
    Aug 29, 2013
    Messages:
    2,161
    Likes Received:
    247
    Thanks for making this mod. This will make a good addition to help prevent bots. I still use the website to check on IPs and about 7 out of 10 times I find reports.

    I tried to get an API key and forgot I got one a long time ago for my website. I have no idea if I still have my API key or what. They won't let me get another one for my site. I will have to ask them for it. :( Then I can try out your mod!
     
  3. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    Hi David, no problem.
    Have done the honeypot mod but still had 1 or 2 registrations come through each week. Have had this running for a week and have had no registrations, with 34 attempts registered even with the honeypot mod on.
    I did notice some try to register with a few different emails using the same ip. They must get a new ip and then try as hard as they can to do their thing before it gets flagged up as a spam ip.

    [​IMG]

    Again this is on top of honeypot not allowing 254 ip's in the last week to enter the site at all.
    Have a look at the last 3 days of the honeypot log.

    HTML:
    
    2014-09-22 :: 02-42-13 :: BLOCKED 87.206.240.230 :: 5 :: 44 :: 2 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0
    2014-09-22 :: 03-02-25 :: BLOCKED 199.180.130.80 :: 5 :: 25 :: 54 :: Suspicious, Comment Spammer :: /register :: Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre
    2014-09-22 :: 03-02-26 :: BLOCKED 199.180.130.80 :: 5 :: 25 :: 54 :: Suspicious, Comment Spammer :: /register.php? :: Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre
    2014-09-22 :: 05-27-29 :: BLOCKED 193.201.224.56 :: 5 :: 44 :: 10 :: Suspicious, Comment Spammer :: /test.php :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) )
    2014-09-22 :: 06-24-09 :: BLOCKED 62.210.78.197 :: 5 :: 38 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
    2014-09-22 :: 08-00-35 :: BLOCKED 62.210.114.48 :: 5 :: 47 :: 13 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0
    2014-09-22 :: 08-46-53 :: BLOCKED 180.150.178.22 :: 5 :: 34 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0
    2014-09-22 :: 09-26-13 :: BLOCKED 173.44.37.250 :: 7 :: 83 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-22 :: 09-43-13 :: BLOCKED 96.47.224.42 :: 7 :: 82 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-22 :: 09-54-32 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 3 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-22 :: 09-54-32 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 3 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-22 :: 09-54-33 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 3 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-22 :: 14-36-21 :: BLOCKED 23.88.29.186 :: 5 :: 24 :: 1 :: Suspicious, Comment Spammer :: /search.php?q=%253Etagsmodule%20image-slider2&error=404 :: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 14-36-23 :: BLOCKED 23.88.29.186 :: 5 :: 24 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 14-36-23 :: BLOCKED 23.88.29.186 :: 5 :: 24 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 14-36-23 :: BLOCKED 23.88.29.186 :: 5 :: 24 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 16-12-16 :: BLOCKED 197.232.21.96 :: 5 :: 29 :: 50 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0
    2014-09-22 :: 17-16-56 :: BLOCKED 62.210.129.133 :: 5 :: 40 :: 2 :: Suspicious, Comment Spammer :: /index.php :: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 17-16-56 :: BLOCKED 62.210.129.133 :: 5 :: 40 :: 2 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
    2014-09-22 :: 18-37-18 :: BLOCKED 96.47.224.50 :: 7 :: 83 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-22 :: 19-00-23 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.00
    2014-09-22 :: 19-00-23 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.00
    2014-09-22 :: 19-00-23 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.00
    2014-09-22 :: 19-00-42 :: BLOCKED 23.88.29.186 :: 5 :: 26 :: 1 :: Suspicious, Comment Spammer :: /search.php?q=RS%20images&error=404 :: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36 OPR/23.0.1522.77
    2014-09-22 :: 19-00-43 :: BLOCKED 23.88.29.186 :: 5 :: 26 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36 OPR/23.0.1522.77
    2014-09-22 :: 19-00-43 :: BLOCKED 23.88.29.186 :: 5 :: 26 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36 OPR/23.0.1522.77
    2014-09-22 :: 19-00-43 :: BLOCKED 23.88.29.186 :: 5 :: 26 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36 OPR/23.0.1522.77
    2014-09-22 :: 20-41-25 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
    2014-09-22 :: 20-41-25 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
    2014-09-22 :: 20-41-26 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
    2014-09-22 :: 21-52-46 :: BLOCKED 96.47.224.50 :: 7 :: 83 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-23 :: 01-49-06 :: BLOCKED 96.47.225.162 :: 5 :: 73 :: 1 :: Suspicious, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-23 :: 02-26-19 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
    2014-09-23 :: 02-26-21 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
    2014-09-23 :: 02-26-22 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
    2014-09-23 :: 05-44-45 :: BLOCKED 190.0.16.58 :: 5 :: 39 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:22.0) Gecko/20100101 Firefox/22.0
    2014-09-23 :: 07-33-55 :: BLOCKED 120.203.214.182 :: 5 :: 53 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20100101 Firefox/21.0
    2014-09-23 :: 08-52-46 :: BLOCKED 62.210.114.48 :: 5 :: 47 :: 14 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:22.0) Gecko/20100101 Firefox/22.0
    2014-09-23 :: 09-22-37 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)
    2014-09-23 :: 09-22-37 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)
    2014-09-23 :: 09-22-42 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; x64; SV1; .NET CLR 2.0.50727)
    2014-09-23 :: 10-16-45 :: BLOCKED 173.44.37.250 :: 7 :: 83 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-23 :: 12-51-28 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1; U; en) Opera 8.01
    2014-09-23 :: 12-51-28 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1; U; en) Opera 8.01
    2014-09-23 :: 12-51-29 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1; U; en) Opera 8.01
    2014-09-23 :: 13-36-06 :: BLOCKED 193.150.120.16 :: 5 :: 49 :: 1 :: Suspicious, Comment Spammer :: /search.php?q=index.php++++++++++++++++++++++++++++++++++++++++++++%5b+%c0%ea%f2%e8%e2%e0%f6%e8%ff+%5d+Result:+%f4%ee%f0%f3%ec+%ed%e5+%ed%e0%e9%e4%e5%ed+%20+%ed%e5+%f3%e4%e0%eb%ee%f1%fc+%ee%ef%f0%e5%e4%e5%eb%e8%f2%fc+IP&error=404 :: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-23 :: 13-36-07 :: BLOCKED 193.150.120.16 :: 5 :: 49 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-23 :: 13-36-07 :: BLOCKED 193.150.120.16 :: 5 :: 49 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-23 :: 13-36-07 :: BLOCKED 193.150.120.16 :: 5 :: 49 :: 1 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-23 :: 14-43-41 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
    2014-09-23 :: 14-43-41 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
    2014-09-23 :: 14-43-43 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
    2014-09-23 :: 15-25-32 :: BLOCKED 221.146.243.48 :: 5 :: 39 :: 7 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:22.0) Gecko/20100101 Firefox/22.0
    2014-09-23 :: 17-03-13 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/0.91 Beta (Windows)
    2014-09-23 :: 17-03-13 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/0.91 Beta (Windows)
    2014-09-23 :: 17-03-15 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/0.91 Beta (Windows)
    2014-09-23 :: 17-07-15 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-23 :: 17-07-16 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-23 :: 17-07-16 :: BLOCKED 178.137.87.105 :: 5 :: 47 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
    2014-09-23 :: 21-55-32 :: BLOCKED 162.244.9.21 :: 5 :: 36 :: 86 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:22.0) Gecko/20100101 Firefox/22.0
    2014-09-23 :: 22-26-56 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)
    2014-09-23 :: 22-26-56 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)
    2014-09-23 :: 22-27-06 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)
    2014-09-23 :: 22-31-25 :: BLOCKED 96.47.224.42 :: 7 :: 82 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-23 :: 22-41-52 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322)
    2014-09-23 :: 22-41-53 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322)
    2014-09-23 :: 22-42-02 :: BLOCKED 46.119.122.233 :: 5 :: 26 :: 5 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322)
    2014-09-24 :: 00-39-51 :: BLOCKED 72.46.131.122 :: 5 :: 38 :: 11 :: Suspicious, Comment Spammer :: /adsearch.php :: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-24 :: 00-39-51 :: BLOCKED 72.46.131.122 :: 5 :: 38 :: 11 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-24 :: 00-39-52 :: BLOCKED 72.46.131.122 :: 5 :: 38 :: 11 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-24 :: 00-39-52 :: BLOCKED 72.46.131.122 :: 5 :: 38 :: 11 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.143 Safari/537.36
    2014-09-24 :: 01-22-09 :: BLOCKED 96.47.224.42 :: 7 :: 82 :: 1 :: Suspicious, Harvester, Comment Spammer :: /shoppingcart.php?view=1 :: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)
    2014-09-24 :: 01-47-22 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)
    2014-09-24 :: 01-47-25 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)
    2014-09-24 :: 01-47-25 :: BLOCKED 46.118.117.154 :: 5 :: 25 :: 6 :: Suspicious, Comment Spammer :: / :: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; .NET CLR 2.0.50727)
    2014-09-24 :: 04-44-15 :: BLOCKED 87.206.240.230 :: 5 :: 44 :: 4 :: Suspicious, Comment Spammer :: / :: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
    
     
    Last edited: Sep 24, 2014
  4. david62311

    david62311 Well-Known Member

    Joined:
    Aug 29, 2013
    Messages:
    2,161
    Likes Received:
    247
    Good news! I found my API key. I had backed it up and put it on my laptop. Phew. I had to look to see where it went. On the BotScout.php file it goes on line 26 where it shows:
    PHP:
    $APIKEY '';
    I doubt, I will see much of anything as far as activity as, I have blocked the main bots that were pegging me from Paris, France using the .htaccess file. I think they main controllers of all of the bots I used to see. I used to see all kind of IPs hitting my fake register page that recorded their IP when the devices went to it. Once I blocked the old browsers and then the City, my site it very quiet. Keeping the bots from even accessing your webite with using the .htaccess file is an excellent way to stop the bots from even seeing a site.

    I on occasion get a straggler bot hitting my page using a different browser and then I make a quick adjustment to block that browser if I see more than a couple of hits using the same browser that I have not blocked yet.

    If everybody in the World that has a Google Chrome or Firefox browser updated their browsers to the latest version then, there is a good possibility if they had a spam bot added to their browsers that the spam bot would be removed. The reason why some of us admins can see several different IPs reported is because those IPs are infected PCs being used remotely by a computer using a spam bot controller.

    Where do you see that report you showed me in your 2nd post here? Is this a honeypot report or a BotScout report? I am confused.
     
    Last edited: Sep 24, 2014
  5. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    Hi David , they are from the honeypot log from
    PHP:
     if ($block) {
                
    ozh_httpbl_logme($block,$ip,$type,$threat,$activity,$typemeaning);
    in the honeypot script here
    The function ozh_httpbl_logme logs all blocked attempts in logs/block.log
     
  6. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    This mod has prevented 56 bot registrations in the last 10 days.
    56 that escape the honeypot mod already in action that is.
    Have not had 1 registration come through at all.

    Just been working on an admin mod that checks all registered user emails and all their ip's they have used to access webid. Deleted quite a few of them. It checks them all against ones on botscout and stopforumspam.
    .
     
    Last edited: Sep 30, 2014
  7. nay27uk

    nay27uk Super Moderator Staff Member

    Joined:
    Nov 24, 2009
    Messages:
    5,573
    Likes Received:
    549
    Great work Panni if you have Git I would suggest committing both mods as a pull request.

    Lets make WeBid 1.1.2 or whatever it will be called the first Stable non BETA version of WeBid, We can all wait for a non BETA version, There is no rush getting the next version out lets get it working 100% BUG free with all the new and enhanced MODS first.

    (The above is my Note to all members and to Renlok THERE IS NO RUSH to get the next version out and now with the GIT we can all contribute to the first NON BETA and ENHANCED version of WeBid).
     
    Last edited: Sep 30, 2014
  8. evilbudz

    evilbudz Member

    Joined:
    Feb 16, 2015
    Messages:
    31
    Likes Received:
    1
    none of these codes work in my webid as it does not have any of the stated codes so how i use these? i cant post my register.php as its to big it says
     
    Last edited: Feb 22, 2015
  9. evilbudz

    evilbudz Member

    Joined:
    Feb 16, 2015
    Messages:
    31
    Likes Received:
    1
    oh i found code sort of the same and edited it to what was stated but done something wrong as lost whole site lol, i re-deployed a backup and is fine now this happend when i changed code for botscout when change code to whats recommended it screws site totaly i have version 1.1.1 installed from Softalisous in my cpanel if this helps also the full path to files would help so much as most files are not where they are stated for some reason, also why does so much not work like does not send emails, news letters, cant change anything but upload my own banner anything thing else screws the site and have start again
     
    Last edited: Feb 22, 2015
  10. nay27uk

    nay27uk Super Moderator Staff Member

    Joined:
    Nov 24, 2009
    Messages:
    5,573
    Likes Received:
    549
    All files will be in your FTP you need to download an FTP client like FileZilla and set it up to conect to your hostings FTP for your site usually somthing like

    FTP Server = ftp.YourDomain.com
    FTP Username = Your Hosting CP Username
    FTP Password = Your Hosting CP Password
    FTP Port = 21

    Depending on where you told Softaculous to install when you installed it all of your WeBid files should be directly in the public_html folder in the FTP

    Dont rely on Softaculous to install as its not reliable instead install it manually via FTP and use your hosting CP to create the database
     
  11. evilbudz

    evilbudz Member

    Joined:
    Feb 16, 2015
    Messages:
    31
    Likes Received:
    1
    i changed a setting to enable ssl now cant login where is the file needed to edit setting back to disable please
     
  12. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    Have you tried adding it on as an attachment?
    This is the webid 1.1.1 register.php with the botscout modifications

    View attachment register.php
    As long as you have placed the BotScout.php into Your_Webid _Site/includes/ folder and configured it with your API key it should work.
    Add your API key at this point:
    PHP:
    $APIKEY '';
    If your key is 123456789 it would look like this

    PHP:
    $APIKEY '123456789';
    If you want to receive emails on every bot it prevents, find

    PHP:
    // send email notices when a bot is stopped?
    // use '1' to send, '0' to skip. 
    $send_alerts '0';
    and change to

    PHP:
    // send email notices when a bot is stopped?
    // use '1' to send, '0' to skip. 
    $send_alerts '1';
    It has prevented thousands of bot registrations on my site alone. Must be over 5000 bot attempts easy.
    I don't know if any managed to get through as I started checking all existing registered users later on, but if they did it was only 3 or 4 that where found to be bots. All the registered users where later checked by email, user name and all their used ip addresses, which filtered out the 3 or 4 bots.
    This mod checks the user name and the email used in the registration process.
     
  13. nay27uk

    nay27uk Super Moderator Staff Member

    Joined:
    Nov 24, 2009
    Messages:
    5,573
    Likes Received:
    549
    MODERATOR NOTE

    evilbudz I have warned you once on another thread about posting irelevent replies to threads, hijacking other threads, posting in the wrong forums, swearing etc the question quoted above should have been asked in a new thread not in here.

    This is the final warning I will issue and any further breach of the forum rules will result in a PERMANENT BAN being issued with no more warnings
     
  14. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    Usage Update!
    Well its been exactly a year since this mod was created and the result on just one site is :

    17502 bot registration attempts have been blocked during the last year.
    Going by the rating of this mod -currently: zero- it would seem nobody has liked it. :(
    Would not be without it though. Can't imagine deleting so many registered users, who all they want to do is use our webid for spam.
     
  15. nay27uk

    nay27uk Super Moderator Staff Member

    Joined:
    Nov 24, 2009
    Messages:
    5,573
    Likes Received:
    549
    Not tried it yet panni but may install it on me demo
     
  16. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    Hi Nay ok,
    I have attached a new file  for the latest webid version which has changed the email_class to email_handle
    Scrap that I have updated the mod for all versions of webid.
     
    Last edited: Jun 20, 2015
    nay27uk likes this.
  17. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
    ...
     
    Last edited: Jun 20, 2015
    nay27uk likes this.
  18. pani100

    pani100 Well-Known Member

    Joined:
    May 9, 2011
    Messages:
    2,327
    Likes Received:
    449
  19. gsc1ugs

    gsc1ugs Active Member

    Joined:
    Mar 9, 2016
    Messages:
    430
    Likes Received:
    16
    sorry sound thick but how do I install this>? I have api key
     
  20. nay27uk

    nay27uk Super Moderator Staff Member

    Joined:
    Nov 24, 2009
    Messages:
    5,573
    Likes Received:
    549
    Looks like the link to the mod was broken I have updated it now. or you can CLICK ME to be taken there
     

Share This Page