![[TAC] Fool Bot Honey Pot](/community/data/resource_icons/1/1085.jpg?1577367167){kind=icon}
[TAC] Fool Bot Honey Pot [Paid] 3.0.32
- Thread starter tenants
- Start date
TPerry
Well-known member
MattW
Well-known member
That add-on isn't installed, only this one. It was blocking ALL IP addresses to his site.
TPerry
Well-known member
That's unusual.. the problem I had with it was it wouldn't let you register/log in at all. Never got a 401 error from it.
MattW
Well-known member
tenants
Well-known member
@Jeffin
I've, just seen the thread. It does sound like a DeDos issue, was it?
If you've set it to update the htaccess, you will probably also need to remove your IP from that
Turning on debug mode for your IP will allow you to log in, look through the logs (FBHP or DeDos) and check why this happened. But, if you have set it up to update the htaccess file, you will need to remove the IP address there too (the forum route htaccess file)
See at the bottom: https://xenforo.com/community/resources/dedos-anti-dos-for-spam-bot-scrapers.3305/
I've, just seen the thread. It does sound like a DeDos issue, was it?
If you've set it to update the htaccess, you will probably also need to remove your IP from that
Turning on debug mode for your IP will allow you to log in, look through the logs (FBHP or DeDos) and check why this happened. But, if you have set it up to update the htaccess file, you will need to remove the IP address there too (the forum route htaccess file)
See at the bottom: https://xenforo.com/community/resources/dedos-anti-dos-for-spam-bot-scrapers.3305/
tenants
Well-known member
This message implies only FBHP has been used to block that IP, check through your FBHP logs to see why / when.
MattW
Well-known member
That was my IP address, and I've not visited his site in a week or so. I have a static UK IP address.
Unfortunately, he's uninstalled the addon as soon as I disabled all the listeners, so the FBHP logs have gone.
Jeffin
Well-known member
My forum admin told me that when he looked at the IP of new members they were looking similar so he searched for this IP to find if there are others from the same IP and few others genuine members were listed. It looks like the forum is assigning the same IP to everyone now.
Last edited:
Jeffin
Well-known member
Update: Hi @tenants , I just found out that my server IP 64.64.16.120 is being assigned to all logged in members. I don't know how.
I recently got my hosting company to install SOAP client on my server. Could this be causing the issue?
I recently got my hosting company to install SOAP client on my server. Could this be causing the issue?
Jeffin
Well-known member
Anthony Parsons
Well-known member
Looking at the 1.4 honeypot feature, it shouldn't be that. Like Mike has stated, there is no need to update this with 1.4 as XF now has the same feature... and randomises the fields, so hackers can't write something static to counter it, as you never know what will be hidden on each registration form load, just as this mod does.
rainmotorsports
Well-known member
The absence of logging to determine whats going on will obviously be a terrible loss though.
The honeypot fields in 1.4 are actually 100% obvious. It's the real fields that are randomized it looks like to me. There are fake username and password fields for example this time im looking at the source. But the real fields have random identities. It's the same idea but I don't think its actually implemented entirely the same.
All the hidden fields in 1.4 appear to have (as previously pointed out):
Code:
<p class="explain">Please leave this field blank.</p>Would seem to make missing the honeypots easy, but putting the correct information in the correct fields harder instead. Such as how do we know which field we used was the username. So the bot might get to register still hitting none of the wrong fields. But if you don't know what field was the username or the password... can't login. If thats how it is then in theory still effective but not the same.
Anthony Parsons
Well-known member
Very nice...
Ridemonkey
Well-known member
Does 1.4 implement all of the great statistics/logging that are in FBHP? It's actually very useful for me to track how many bots we're blocking because we have an extremely long baseline on vBulletin for the statistic of # of active users. However, on vB, those active users included any registered bots so tracking that helps adjust my baseline.
While I appreciate when functions are folded into the core and can result in the removal of plugins, this one is particularly well done and useful and I'd hate to lose any of that utility.
While I appreciate when functions are folded into the core and can result in the removal of plugins, this one is particularly well done and useful and I'd hate to lose any of that utility.
Nope
