Go Back   vBulletin.org Forum / vBulletin Modifications / vBulletin 3.6 Modifications / vBulletin 3.6 Add-ons
Reload this Page

Is Bot: Registration Time Check

Register Chat Members List Search Today's Posts Mark Forums Read

Reply
Page 1 of 22 1 23411 > Last »
 
Mod Options
Is Bot: Registration Time Check Details »»
Is Bot: Registration Time Check
Mod Information
The Developer
Last Online: Jan 2010
 
Mod Version: 1.0.0, by calorie (Senior Moderator) calorie is offline
Developer Last Online: Jan 2010 Show Printable Version Email this Page
vB Version: 3.6.8 Rating: (84 votes - 4.79 average) Installs: 657
Released: 30 Dec 2006 Last Update: Never Downloads: 2501
Not Supported Uses Plugins Template Edits  

This mod calculates the time it takes to go between these two pages:
  • /forum/register.php?do=register
  • /forum/register.php?do=addmember
The point is to try and prevent bots from registering at your forum when the time between the two pages is humanly impossible, assuming that humans actually take the time to complete the registration page.

Should a user be blocked from registering at your forum, an email will be sent to your vB webmasteremail address and the user will see the vB noregister phrase message, so no screenshot is necessary.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 30 Dec 2006, 10:46
projectego's Avatar
projectego projectego is offline
Member
  
Join Date: Feb 2006
Location: UK
Real name: Steve
Excellent idea - I'm sure this will make every admin's job alot easier!
__________________
Professional WordPress themes and designs by Pure WordPress
Devil May Cry | Fable 2 | Assassin's Creed | Resident Evil | Windows Vista Help
Reply With Quote
  #3  
Old 30 Dec 2006, 12:12
imported_Pigs imported_Pigs is offline
Member
  
Join Date: Apr 2004
Thanks,
Another cool tool..
Reply With Quote
  #4  
Old 30 Dec 2006, 14:19
Distance's Avatar
Distance Distance is offline
Coder/Designer
  
Join Date: Jul 2006
Real name: Josh
Very good idea!! Excellent infact for sites that attract alot of bots
Reply With Quote
  #5  
Old 30 Dec 2006, 14:34
KURTZ's Avatar
KURTZ KURTZ is offline
Designer
  
Join Date: Nov 2006
Real name: Christian
reserved
Reply With Quote
  #6  
Old 30 Dec 2006, 16:21
Cyburbia's Avatar
Cyburbia Cyburbia is offline
Designer
  
Join Date: Feb 2002
Thanks! This has the potential to be a great mod. Here's my original post with the request:

I've discovered that the Xrumer/Botmaster spambots will submit register.php?do=addmember just seconds after register.php?do=register. While humans take a minute or more to fill out the registration form, bots do it instantly. Here's some evidence from my logs:

87.240.15.25 - - [16/Dec/2006:07:00:41 -0500] "POST /forums/register.php?do=register HTTP/1.0" 200 22180 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:45 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:49 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22576 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:00:57 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"
87.240.15.25 - - [16/Dec/2006:07:01:00 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22579 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)"

Note the times: 07:00:41, 07:00:45, 07:00:49, 07:00:57, 07:01:00. Five hits in 19 seconds.

Here's one that just rolled in a few seconds ago. The IP (193.69.180.120) is a Swedish proxy.

193.69.180.120 - - [16/Dec/2006:15:10:15 -0500] "POST /forums/register.php?do=register HTTP/1.0" 200 22177 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:19 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22860 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:22 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22861 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:25 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22861 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"
193.69.180.120 - - [16/Dec/2006:15:10:29 -0500] "POST /forums/register.php?do=addmember HTTP/1.0" 200 22860 "http://www.*****/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"

Five hits between 15:10:15 and 15:10:29 - 14 seconds.

I think that it attempts to break the captcha, fails, and tries again. After four or five failed attempts, the bot is programmed to give up and move on to the next victim.

Anyhow, I'd like to see a mod that prevents posting or submittal of register.php?do=addmember until a minute or more after it's been displayed. This might not stop Xrumer and other spambots, but it will slow them down; a way at getting back at them. The mod seems relatively simple, but I lack the skills to program it. Any takers?

EDIT: Yes, I know about the other hacks to prevent spam. I get very little spam on my board, thanks to a strong CAPTCHA and an extensive emailblacklist, among other security measures. I'm just looking to slow the bots down. If enough people install such a mod, we could dramatically slow the rate of spamming, and makethe bots less effective.
__________________
Cyburbia | urban planning community
http://www.cyburbia.org/forums
Reply With Quote
  #7  
Old 30 Dec 2006, 21:34
Moparx Moparx is offline
Contributor
  
Join Date: Jul 2004
Real name: Christopher
This is an excellent idea.
__________________
http://www.virtualinfusion.net
An Anime and Manga discussion forum.
Reply With Quote
  #8  
Old 30 Dec 2006, 23:26
Snake's Avatar
Snake Snake is offline
Banned
  
Join Date: Mar 2005
Location: Cleveland, OH
Real name: Josh
That's excellent. Thanks!
Reply With Quote
  #9  
Old 31 Dec 2006, 23:28
amagab amagab is offline
Member
  
Join Date: May 2006
Marvelous! I installed this mod and a couple of hours later I got a notification in my email about a spammer being prevented from registering. It took the spammer 4 seconds to go between the pages.....I don't know anyone that fast.

Bloody awesome!

Thanks!
Reply With Quote
  #10  
Old 01 Jan 2007, 01:59
MichaelGoldman MichaelGoldman is offline
Member
  
Join Date: Nov 2005
good idea, going to install now. Sick and tired of all the bots on my forum

btw, i think 15 sec is way too high.. it takes a bot less than a second to fill in the fields, decode captcha and press the submit button.
__________________
Michael
Looking where to invest your money? HYIP Forums
NEW!! Find in Forums - Does your forum show up there?
Last edited by MichaelGoldman : 01 Jan 2007 at 02:04.
Reply With Quote
  #11  
Old 01 Jan 2007, 02:59
scottct1 scottct1 is offline
Contributor
  
Join Date: Mar 2002
Great if this works I nominate it as Mod of the Month.
Reply With Quote
  #12  
Old 01 Jan 2007, 03:06
amagab amagab is offline
Member
  
Join Date: May 2006
Maybe I spoke too soon. This mod just blocked an attempt by a @ukr.net address and then one minute later that darn same person spammed my site.

How did that happen?
Reply With Quote
  #13  
Old 01 Jan 2007, 03:15
amagab amagab is offline
Member
  
Join Date: May 2006
Originally Posted by amagab View Post
Maybe I spoke too soon. This mod just blocked an attempt by a @ukr.net address and then one minute later that darn same person spammed my site.

How did that happen?
Sorry, I just realized that spammer registered before I installed this mod.

Thanks!
Reply With Quote
  #14  
Old 01 Jan 2007, 03:27
EyeCrave's Avatar
EyeCrave EyeCrave is offline
Contributor
  
Join Date: Sep 2002
Installed
Reply With Quote
  #15  
Old 01 Jan 2007, 20:30
amagab amagab is offline
Member
  
Join Date: May 2006
It's pretty cool. In the one day that I've had it installed, this mod has blocked about 12 spambot attempts. However, the last attempt took 14 seconds to move between the pages so I assume that if they change their spambot to 16 seconds they would make it through and then I would have to change the mod to a higher number.

Anyway, I love this mod.
Reply With Quote
Reply
Page 1 of 22 1 23411 > Last »

« Previous Mod | Next Mod »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 13:13.

Layout Options | Width: Wide Color:
vB Official | vB Germany
Powered by vBulletin® Version 3.6.12
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Design by Princeton
Copyright ©2001 - , vbulletin.org. All rights reserved.
vBulletin® is a registered trademark.