A trick to send spammers to hell (or anywhere you want!)

[edward hamilton]

I'm still getting a few spam registrations but they have definitely slowed way down.

To see what I'm missing, I wrote this to take a look occasionally, while I sip a beer in my new free time.

I used http://www.maxmind.com/app/csv to help determine the countries from the ip addresses


added spamlog table with fields id_spamlog, ip, viewdate, num_spam
added geoip_data table with fields country_full, ip32_start, ip32_end
http://www.maxmind.com/app/csv

PHP Code:

<?php
session_start();
include '/admin/config.php'; // connect to database

foreach ($_POST as $key => $value) {  $$key = $value; }
?>
 <table><tr><td colspan="4">
<form action="" method="post" name="theform"  >
 
  Find the last <input type="text" name="lastspam"  value=" "> 
    <input type="submit" name="action"  value="bots"> 
     
        </form></td></tr> 
<?php

if(isset($lastspam)){  


$sql = "SELECT id_spamlog  
           FROM spamlog 
          ORDER by id_spamlog DESC LIMIT 1";  
          $result = mysql_query($sql)  
          or die(mysql_error()); 

  list($num) = mysql_fetch_row($result); 
//   echo "num $num";
 
$id =($num - $lastspam); 
 
    while($num > $id)        {
    $sql = "SELECT id_spamlog, ip, viewdate, num_spam 
            FROM spamlog 
            WHERE id_spamlog = '$num' "; 
            $result = mysql_query($sql) 
            or die(mysql_error()); 
            
            list($id_spamlog, $ip, $viewdate, $num_spam) = mysql_fetch_row($result); 
            
            if(!empty($id_spamlog)){
echo "<tr><td> id </td><td></td><td>ip </td><td>Country</td><td>Date</td><td></td> <td>Attempts</td></tr>";

/*<td>ip32_start / ip_spam / ip32_end</td> */

//break ip address into four section 
// 404232216 = 16777216*24 + 65536*24 + 256*24 + 24

 $ip32 = explode(".", $ip);  

 $ip32_spam = (16777216*$ip32[0] + 65536*$ip32[1] + 256*$ip32[2] + $ip32[3]);
 
// echo "16777216*$ip32[0] + 65536*$ip32[1] + 256*$ip32[2] + $ip32[3]<br>";
// echo "ipspam - $ip32_spam<br> ";

$ip32_spam = str_replace(' ', '', $ip32_spam);

$ip32_spam = abs($ip32_spam);       
 
 $sql = "SELECT  country_full, ip32_start, ip32_end 
            FROM geoip_data 
            WHERE '$ip32_spam' between ABS(ip32_start) AND ABS(ip32_end) ";
            $result = mysql_query($sql) 
            or die(mysql_error()); 

list($country, $ip32_start, $ip32_end) = mysql_fetch_row($result); 

 
echo "<tr><td> $id_spamlog</td><td width=\"10\"></td><td>$ip </td><td>$country</td><td>$viewdate</td><td width=\"20\"><td>$num_spam</td> </tr>
<tr><td height = \"20\"></td></tr>";
}
    $num--; 
     }
echo "</table>";
}
?>

Further down in this spam log some bots try as many as 8 times a day.
Yesterday there were 78 different ip addresses trying to register.

[Mopar1973Man]

Shoot...

Even more easy is to ask questions at the registration time...

Like my site is a Dodge Cummins support site. So I ask question about the the Cummins engine at registration time. Like how may cylinder does a Cummins have etc. If you a true Cummins fan you would know this simple answer is 6 (six)... But the bots have never made it in the door yet...

So really you don't need to go out on a limb codeing use the tools you already got...

But to the OP I love the idea of sending the bot to another site... Neat trick but just a bit to much moding for me... I'm not really wanting to chop up the code...

[Glenn_E]

Originally Posted by Mopar1973Man

... Even more easy is to ask questions at the registration time...

I'm with you - I was deleting a few new registrations a day until I added a question/answer. Mine is a simple what is 12-2 question, which stopped them cold.

[tristanisginger]

thisgeek, i like your way very mucho. Very clever as I don't have to worry about any upgrades.

I would like to go one step further and incorporate dtv100's idea and do the same for new threads and replies, can you give me a clue to the .htaccess code.

many thanks

tristan

[Marvin Hlavac]

Maria, thanks very much for sharing. I was searching how to do this exact thing last night when I found this thread. I implemented it this morning. Oh boy, what a boring day I've had ever since, not a single spam registration to deal with. :-)

P.S. I've implemented your mod on my vB 3.8.x.

[shaker2003]

Guys, i change register.php everywhere. but look
when i click register on main page, nothing change. when i click a have blank screen.