blackhole bot trap how to test - GoFuckYourself.com

hamiltonsteele · 06-06-2021, 08:34 AM

Hi there I just installed, or at least tried to install this on a PHPBB forum....

https://perishablepress.com/blackhole-bad-bots/

Does anyone have an idea of how I can test this out to make sure it's working?

zijlstravideo · 06-06-2021, 12:09 PM

"include a hidden link to a robots.txt-forbidden directory somewhere on your pages. Bots that ignore or disobey your robots rules will crawl the link and fall into the honeypot trap, which then performs a WHOIS Lookup and records the event in the blackhole data file. Once added to the blacklist data file, bad bots immediately are denied access to your site."

Can't you just install the TOR browser, and visit your "hidden page/link" directly yourself? Then your TOR ip should become visible as being blacklisted.

You can also use curl, for example... from one of your second websites/domains (if on a different ip)

zijlstravideo · 06-06-2021, 12:24 PM

Dude, literally on the same page: https://perishablepress.com/blackhol...ckhole-testing

hamiltonsteele · 06-06-2021, 01:13 PM

Quote:

Originally Posted by zijlstravideo

Dude, literally on the same page: https://perishablepress.com/blackhol...ckhole-testing

Sorry if I wasn't clear but my goal was to check that the invisible link was truly there for bots.

sarettah · 06-06-2021, 01:29 PM

Quote:

Originally Posted by hamiltonsteele

Sorry if I wasn't clear but my goal was to check that the invisible link was truly there for bots.

Look at your page source. You should be able to see the link in your code.

.

hamiltonsteele · 06-06-2021, 02:36 PM

Alright not sure if I'm an idiot and missed a step but blackhole is logging the IP's that visit the trap... but it doesn't seem to actually be banning them.

zijlstravideo · 06-06-2021, 03:19 PM

Quote:

Originally Posted by hamiltonsteele

Alright not sure if I'm an idiot and missed a step but blackhole is logging the IP's that visit the trap... but it doesn't seem to actually be banning them.

If you visit yourdomainhere.com/blackhole/ twice, you still have access? It works for the demo.

If you can't access that, but still can access your site, you probably missed the step of including the /blackhole/index.php file into your site's header.

zijlstravideo · 06-06-2021, 03:37 PM

Also, from what I could tell from the website - the script only checks for the user agent, and since Googlebot and such are whitelisted, any bot can easily spoof and use any of the whitelisted botnames on the list to bypass it.

Might get rid of some bots, but it isn't exactly bullet proof.

hamiltonsteele · 06-07-2021, 02:51 AM

Quote:

Originally Posted by zijlstravideo

If you visit yourdomainhere.com/blackhole/ twice, you still have access? It works for the demo.

If you can't access that, but still can access your site, you probably missed the step of including the /blackhole/index.php file into your site's header.

Yeah that much is working... I'm guessing adding
<?php include(realpath(getenv('DOCUMENT_ROOT')) . '/blackhole/index.php'); ?>

To a phpbb theme's overall header just doesn't do the trick...

zijlstravideo · 06-07-2021, 03:42 AM

And if you add it all the way at the top... at the first line?

hamiltonsteele · 06-07-2021, 04:46 AM

Quote:

Originally Posted by zijlstravideo

And if you add it all the way at the top... at the first line?

Tried that, sadly didn't make a difference.

zijlstravideo · 06-07-2021, 05:23 AM

And when you add it to the first line of app.php?

hamiltonsteele · 06-07-2021, 05:48 AM

Quote:

Originally Posted by zijlstravideo

And when you add it to the first line of app.php?

didn't even know that was a thing but still no luck.

06-06-2021, 08:34 AM	#1
hamiltonsteele Confirmed User Industry Role: Join Date: Jul 2003 Posts: 1,041	blackhole bot trap how to test Hi there I just installed, or at least tried to install this on a PHPBB forum.... https://perishablepress.com/blackhole-bad-bots/ Does anyone have an idea of how I can test this out to make sure it's working? __________________ http://steelehard.com/ الإباحية باللغة العربية Discord: https://discord.gg/QWJpmDSFc2 http://le-beverley.com/ Under Development Twitter: https://twitter.com/steele_hard Spotify : https://open.spotify.com/show/43uaTA1AEPa2Nf0Tmvppd0

06-06-2021, 12:09 PM	#2
zijlstravideo Confirmed User Industry Role: Join Date: Sep 2013 Location: The Netherlands Posts: 805	"include a hidden link to a robots.txt-forbidden directory somewhere on your pages. Bots that ignore or disobey your robots rules will crawl the link and fall into the honeypot trap, which then performs a WHOIS Lookup and records the event in the blackhole data file. Once added to the blacklist data file, bad bots immediately are denied access to your site." Can't you just install the TOR browser, and visit your "hidden page/link" directly yourself? Then your TOR ip should become visible as being blacklisted. You can also use curl, for example... from one of your second websites/domains (if on a different ip) __________________ Contact: email

06-06-2021, 12:24 PM	#3
zijlstravideo Confirmed User Industry Role: Join Date: Sep 2013 Location: The Netherlands Posts: 805	Dude, literally on the same page: https://perishablepress.com/blackhol...ckhole-testing __________________ Contact: email

06-06-2021, 02:36 PM	#6
hamiltonsteele Confirmed User Industry Role: Join Date: Jul 2003 Posts: 1,041	Alright not sure if I'm an idiot and missed a step but blackhole is logging the IP's that visit the trap... but it doesn't seem to actually be banning them. __________________ http://steelehard.com/ الإباحية باللغة العربية Discord: https://discord.gg/QWJpmDSFc2 http://le-beverley.com/ Under Development Twitter: https://twitter.com/steele_hard Spotify : https://open.spotify.com/show/43uaTA1AEPa2Nf0Tmvppd0

06-06-2021, 03:37 PM	#8
zijlstravideo Confirmed User Industry Role: Join Date: Sep 2013 Location: The Netherlands Posts: 805	Also, from what I could tell from the website - the script only checks for the user agent, and since Googlebot and such are whitelisted, any bot can easily spoof and use any of the whitelisted botnames on the list to bypass it. Might get rid of some bots, but it isn't exactly bullet proof. __________________ Contact: email

06-07-2021, 03:42 AM	#10
zijlstravideo Confirmed User Industry Role: Join Date: Sep 2013 Location: The Netherlands Posts: 805	And if you add it all the way at the top... at the first line? __________________ Contact: email

06-07-2021, 05:23 AM	#12
zijlstravideo Confirmed User Industry Role: Join Date: Sep 2013 Location: The Netherlands Posts: 805	And when you add it to the first line of app.php? __________________ Contact: email