blackhole bot trap how to test

**zijlstravideo** · 06-06-2021, 11:09 AM

"include a hidden link to a robots.txt-forbidden directory somewhere on your pages. Bots that ignore or disobey your robots rules will crawl the link and fall into the honeypot trap, which then performs a WHOIS Lookup and records the event in the blackhole data file. Once added to the blacklist data file, bad bots immediately are denied access to your site."

Can't you just install the TOR browser, and visit your "hidden page/link" directly yourself? Then your TOR ip should become visible as being blacklisted.

You can also use curl, for example... from one of your second websites/domains (if on a different ip)

**zijlstravideo** · 06-06-2021, 11:24 AM

Dude, literally on the same page: https://perishablepress.com/blackhol...ckhole-testing

**hamiltonsteele** · 06-06-2021, 12:13 PM

Originally posted by zijlstravideo

Dude, literally on the same page: https://perishablepress.com/blackhol...ckhole-testing

Sorry if I wasn't clear but my goal was to check that the invisible link was truly there for bots.

**sarettah** · 06-06-2021, 12:29 PM

Originally posted by hamiltonsteele

Sorry if I wasn't clear but my goal was to check that the invisible link was truly there for bots.

Look at your page source. You should be able to see the link in your code.

.

**hamiltonsteele** · 06-06-2021, 01:36 PM

Alright not sure if I'm an idiot and missed a step but blackhole is logging the IP's that visit the trap... but it doesn't seem to actually be banning them.

**zijlstravideo** · 06-06-2021, 02:19 PM

Originally posted by hamiltonsteele

Alright not sure if I'm an idiot and missed a step but blackhole is logging the IP's that visit the trap... but it doesn't seem to actually be banning them.

If you visit yourdomainhere.com/blackhole/ twice, you still have access? It works for the demo.

If you can't access that, but still can access your site, you probably missed the step of including the /blackhole/index.php file into your site's header.

**zijlstravideo** · 06-06-2021, 02:37 PM

Also, from what I could tell from the website - the script only checks for the user agent, and since Googlebot and such are whitelisted, any bot can easily spoof and use any of the whitelisted botnames on the list to bypass it.

Might get rid of some bots, but it isn't exactly bullet proof.

**hamiltonsteele** · 06-07-2021, 01:51 AM

Originally posted by zijlstravideo

If you visit yourdomainhere.com/blackhole/ twice, you still have access? It works for the demo.

If you can't access that, but still can access your site, you probably missed the step of including the /blackhole/index.php file into your site's header.

Yeah that much is working... I'm guessing adding
<?php include(realpath(getenv('DOCUMENT_ROOT')) . '/blackhole/index.php'); ?>

To a phpbb theme's overall header just doesn't do the trick...

**zijlstravideo** · 06-07-2021, 02:42 AM

And if you add it all the way at the top... at the first line?

**hamiltonsteele** · 06-07-2021, 03:46 AM

Originally posted by zijlstravideo

And if you add it all the way at the top... at the first line?

Tried that, sadly didn't make a difference.

**zijlstravideo** · 06-07-2021, 04:23 AM

And when you add it to the first line of app.php?

**hamiltonsteele** · 06-07-2021, 04:48 AM

Originally posted by zijlstravideo

And when you add it to the first line of app.php?

didn't even know that was a thing but still no luck.

blackhole bot trap how to test

blackhole bot trap how to test

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment