@Bwana What makes you think this is a bot
12 seconds to register is quite fast (but paid human spammers will use semi automated tools and will always be the fastest humans to register due to the repetition of their job and finding short cuts for doing the same things over and over, it is not a humanly impossible speed). Be warned, paid human spammers do not always work alone, and will often come with a group of users.
Reasons that I suggest you are possibly looking at a paid forum spammer from this data (Human Spam):
JavaScript Engine & Detected Plugin
There a things recorded by FBHP that are not required to register, it is very unlikely a bot would even notice these
For instance, the plugins of the browser is detected (bots will not have plugins, browser bots a very rare, XRumer pretty much dominates most forum bot registrations, they do not use browsers or a js engine and will have no need to complete this)
Since this is not required, and it is detected using JavaScript, it would be very unlikely that a bot would
1) use a JavaScript engine
2) feel the need to fill "detected plugins" with a real plugin (such as flash 13), since some real users will have no plugins at all
That's a lot of effort to complete something that bots do not need to complete in order to register
Country of User
Paid posters, particularity copy paste posters, will often come from countries that will work for very small amounts of $
So if we also check their IP address
http://whatismyipaddress.com/ip/182.185.247.23
IP:182.185.247.23
Decimal:3065640727
Hostname:182.185.247.23
ISP: Pakistan Telecommuication company limited
Country: Pakistan
State/Region: Punjab
City: Lahore
(Although they are using a proxy)
We notice they are possibly from a country where there is a higher than average % of paid posters
XRumer users (or automated spam bot users) are not usually from Pakistan
The majority of XRumer users will come from the following countries:
America
Europe
China
Ukraine
Russia
-- However, there are still some XRumer users from Pakistan (but it's more common to see paid posters from Pakistan).
I might start logging country information in my personal stats about bots to show this
They are using a disposal email address
Bots certainly never need to use disposable email addresses (humans do).
For things like XRumer, the automation tool its self can be used to automate against many email sites.
People who use automation software to register on forum will not be unfamiliar with using the same tools to register hundreds of thousands of email accounts.
The user in your data shows:
wingness@dispostable.com
dispostable.com is a disposable email site.
I have never seen a bot use a disposable email, they use things like hotmail.com, gmail.com, yahoo.com, aol.com, outlook.com (just look at your fbhp logs for all your other spam bot users)
This is why I put so much information in the logs, I can almost certainly say that this is a human paid poster (other than videoing them registering, I can't really think of stronger evidence).
What You Can Do For Human Spam
This user
has used automated tools in the past (such as scrapers to leach email addresses so they can spam email accounts), but in this case they do not register on forums/blogs with automation,
the above evidence points at human spam
What you can do:
1) Use the plugin StopHumanSpam:
See Here
2) To stop disposable email accounts, use the plugin AnyAPI and turn on the API for disposable emails:
See Here
3) If you are in the position of a country specific niche forum, you can use StopCountrySpam (and also block these sorts of proxies):
See Here
This is not likely to be a bot spammer, FoolBotHoneyPot still currently prevents 100% of spam bots
-If a spam bot ever gets through FBHP, then it wont be one bot, but thousands of bots on many thousands of forums, which is why I always suggest using a secondary spam bot mechanism (such as
CustomImgCaptcha), but at this point FBHP still stops 100% of spam bots.
![[TAC] Fool Bot Honey Pot](/community/data/resource_icons/1/1085.jpg?1577367167){kind=icon}
