Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Is Bot: Registration Time Check Details »»
Is Bot: Registration Time Check
Mod Version: 1.0.0, by calorie (Coder/Designer) calorie is offline
Developer Last Online: Jun 2013 I like it Show Printable Version Email this Page

vB Version: 3.6.8 Rating: (66 votes - 4.88 average) Installs: 722
Released: 30 Dec 2006 Last Update: Never Downloads: 3396
Not Supported Uses Plugins Template Edits  

This mod calculates the time it takes to go between these two pages:
  • /forum/register.php?do=register
  • /forum/register.php?do=addmember
The point is to try and prevent bots from registering at your forum when the time between the two pages is humanly impossible, assuming that humans actually take the time to complete the registration page.

Should a user be blocked from registering at your forum, an email will be sent to your vB webmasteremail address and the user will see the vB noregister phrase message, so no screenshot is necessary.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 30 Dec 2006, 09:46
projectego's Avatar
projectego projectego is offline
 
Join Date: Feb 2006
Location: UK
Real name: Steve
Excellent idea - I'm sure this will make every admin's job alot easier!
__________________
Reply With Quote
  #3  
Old 30 Dec 2006, 11:12
imported_Pigs imported_Pigs is offline
 
Join Date: Apr 2004
Thanks,
Another cool tool..
Reply With Quote
  #4  
Old 30 Dec 2006, 13:19
Distance's Avatar
Distance Distance is offline
 
Join Date: Jul 2006
Real name: Josh
Very good idea!! Excellent infact for sites that attract alot of bots
Reply With Quote
  #5  
Old 30 Dec 2006, 13:34
KURTZ KURTZ is offline
 
Join Date: Nov 2006
Real name: Christian
reserved
Reply With Quote
  #6  
Old 30 Dec 2006, 15:21
Cyburbia's Avatar
Cyburbia Cyburbia is offline
 
Join Date: Feb 2002
Thanks! This has the potential to be a great mod. Here's my original post with the request:

I've discovered that the Xrumer/Botmaster spambots will submit register.php?do=addmember just seconds after register.php?do=register. While humans take a minute or more to fill out the registration form, bots do it instantly. Here's some evidence from my logs:

87.240.15.25 - - [16/Dec/2006:07:00:41 -0500] "POST /forums/register.php?do=register HTTP/1.0" 200 22180 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:45 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:49 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22576 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:57 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:01:00 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"


Note the times: 07:00:41, 07:00:45, 07:00:49, 07:00:57, 07:01:00. Five hits in 19 seconds.

Here's one that just rolled in a few seconds ago. The IP (193.69.180.120) is a Swedish proxy.

193.69.180.120 - - [16/Dec/2006:15:10:15 -0500] "POST /forums/register.php?do=register HTTP/1.0" 200 22177 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:19 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22860 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:22 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22861 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:25 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22861 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:29 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22860 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"


Five hits between 15:10:15 and 15:10:29 - 14 seconds.

I think that it attempts to break the captcha, fails, and tries again. After four or five failed attempts, the bot is programmed to give up and move on to the next victim.

Anyhow, I'd like to see a mod that prevents posting or submittal of register.php?do=addmember until a minute or more after it's been displayed. This might not stop Xrumer and other spambots, but it will slow them down; a way at getting back at them. The mod seems relatively simple, but I lack the skills to program it. Any takers?

EDIT: Yes, I know about the other hacks to prevent spam. I get very little spam on my board, thanks to a strong CAPTCHA and an extensive emailblacklist, among other security measures. I'm just looking to slow the bots down. If enough people install such a mod, we could dramatically slow the rate of spamming, and makethe bots less effective.
__________________
Cyburbia | urban planning community
http://www.cyburbia.org/forums
Reply With Quote
  #7  
Old 30 Dec 2006, 20:34
Moparx Moparx is offline
 
Join Date: Jul 2004
This is an excellent idea.
Reply With Quote
  #8  
Old 30 Dec 2006, 22:26
Snake's Avatar
Snake Snake is offline
 
Join Date: Mar 2005
Location: Cleveland, OH
Real name: Josh
That's excellent. Thanks!
Reply With Quote
  #9  
Old 31 Dec 2006, 22:28
amagab amagab is offline
 
Join Date: May 2006
Marvelous! I installed this mod and a couple of hours later I got a notification in my email about a spammer being prevented from registering. It took the spammer 4 seconds to go between the pages.....I don't know anyone that fast.

Bloody awesome!

Thanks!
Reply With Quote
  #10  
Old 01 Jan 2007, 00:59
MichaelGoldman MichaelGoldman is offline
 
Join Date: Nov 2005
good idea, going to install now. Sick and tired of all the bots on my forum

btw, i think 15 sec is way too high.. it takes a bot less than a second to fill in the fields, decode captcha and press the submit button.
__________________
Michael
Looking where to invest your money? HYIP Forums
NEW!! Find in Forums - Does your forum show up there?

Last edited by MichaelGoldman; 01 Jan 2007 at 01:04.
Reply With Quote
  #11  
Old 01 Jan 2007, 01:59
scottct1 scottct1 is offline
 
Join Date: Mar 2002
Great if this works I nominate it as Mod of the Month.
Reply With Quote
  #12  
Old 01 Jan 2007, 02:06
amagab amagab is offline
 
Join Date: May 2006
Maybe I spoke too soon. This mod just blocked an attempt by a @ukr.net address and then one minute later that darn same person spammed my site.

How did that happen?
Reply With Quote
  #13  
Old 01 Jan 2007, 02:15
amagab amagab is offline
 
Join Date: May 2006
Originally Posted by amagab View Post
Maybe I spoke too soon. This mod just blocked an attempt by a @ukr.net address and then one minute later that darn same person spammed my site.

How did that happen?
Sorry, I just realized that spammer registered before I installed this mod.

Thanks!
Reply With Quote
  #14  
Old 01 Jan 2007, 02:27
EyeCrave's Avatar
EyeCrave EyeCrave is offline
 
Join Date: Sep 2002
Installed
Reply With Quote
  #15  
Old 01 Jan 2007, 19:30
amagab amagab is offline
 
Join Date: May 2006
It's pretty cool. In the one day that I've had it installed, this mod has blocked about 12 spambot attempts. However, the last attempt took 14 seconds to move between the pages so I assume that if they change their spambot to 16 seconds they would make it through and then I would have to change the mod to a higher number.

Anyway, I love this mod.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 16:30.

Layout Options | Width: Wide Color: