Customizing SMF > Modifications and Packages
Bad Behavior mod - The Web's premier link spam killer (Now with SMF 2 httpBL)
butchs:
I do my utmost to strive for perfection... my standards are held to the highest level. So when there was a claim that my mod was unsafe, I immediately pulled the mod. Tested the heck out of it... Revised some code... Then asked for a peer review by SMF. The mod passed the review so it is back.
:-X
Old Fossil:
--- Quote ---I do my utmost to strive for perfection... my standards are held to the highest level.
--- End quote ---
As should all mod authors.
:)
A.SK:
I is really a premium link spam killer which i enjoy after installing the mod.
Love it.
djkimmel:
Something changed this morning in Bad Behavior. I'm using SMF 1.1.16. I have hundreds of pages of errors for various Google bots and Bing Bots. All the IP addresses are in ranges assigned to Google and Microsoft. I had Bad Behavior 1.5.9 installed but I upgraded to 1.5.11 this afternoon to see if that would make a difference though I haven't changed anything else in some time. Bad Behavior is still blocking a large number, possibly all since I haven't seen any get through yet, of search engine bot requests?
Most of the errors are this one (or the msnbot one KEY: e4de0453): KEY: f1182195
DENIED REASON: User-Agent claimed to be Googlebot, claim appears to be false.
EXPLANATION: An invalid request was received. You claimed to be a major search engine, but you do not appear to actually be a major search engine.
IP: 131.253.41.246
DATE: 2012-08-23 19:03:50
METHOD: GET
URI: /vid/Jordan+Jansen/
PROTOCOL: HTTP/1.1
HEADERS: GET /vid/Jordan+Jansen/ HTTP/1.1 Accept: text/html, text/plain, text/text, text/javascript, text/x-javascript, text/js, text/x-js, text/jscript, text/ecmascript, text/xml, xml/xml, image/*, audio/*, video/*, application/* Accept-Encoding: gzip, deflate Connection: Close From: msnbot(at)microsoft.com Host: w w w.greatlakesbass.com User-Agent: msnbot-media/1.1 (+http://search.msn.com/msnbot.htm)
AGENT: msnbot-media%2F1.1%20%28%2Bhttp%3A%2F%2Fsearch.msn.com%2Fmsnbot.htm%29
ENTITY:
KEY: e4de0453
DENIED REASON: User-Agent claimed to be msnbot, claim appears to be false
EXPLANATION: An invalid request was received. You claimed to be a major search engine, but you do not appear to actually be a major search engine.
Tons of rejected IP 157.55. and 157.56., 131.253.39-.41, 131.256.46-.47 and some 66.249.73 (see below where Bad Behavior says a Mediapartners-Googlebot is on the blacklist too?). User-Agent: Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) AGENT: Mozilla%2F5.0%20%28compatible%3B%20bingbot%2F2.0%3B%20%2Bhttp%3A%2F%2Fwww.bing.com%2Fbingbot.htm%29 being blocked?
IP: 66.249.73.137
crawl-66-249-73-137.googlebot.com
DATE: 2012-08-30 17:46:46
METHOD: GET
URI: /
PROTOCOL: HTTP/1.1
HEADERS: GET / HTTP/1.1 Accept: */* Accept-Encoding: gzip,deflate Connection: Keep-alive From: googlebot(at)googlebot.com Host: w w w.greatlakesbass.com User-Agent: Mozilla (compatible; Mediapartners-Googlebot/2.1;(+http://www.google.com/bot.html)
AGENT: Mozilla%20%28compatible%3B%20Mediapartners-Googlebot%2F2.1%3B%28%2Bhttp%3A%2F%2Fwww.google.com%2Fbot.html%29
ENTITY:
KEY: 17f4e8c8
DENIED REASON: User-Agent was found on blacklist
Also a bunch of errors like the one below from non-bot IP addresses around the world that do not say they are Googlebot, but are being rejected with the same code. They just appear to be referred from search:
IP: 50.140.***.***
c-50-140-***-***.hsd1.in.comcast.net
DATE: 2012-08-30 17:47:15
METHOD: GET
URI: /forum/index.php?topic=3597.0
PROTOCOL: HTTP/1.1
HEADERS: GET /forum/index.php?topic=3597.0 HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip,deflate Host: w w w.greatlakesbass.com Referer: http://w w w.google.com/search User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.8 (KHTML, like Gecko; Google Web Preview) Chrome/19.0.1084.36 Safari/536.8 X-Forwarded-For: 50.140.***.***
AGENT: Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%29%20AppleWebKit%2F536.8%20%28KHTML%2C%20like%20Gecko%3B%20Google%20Web%20Preview%29%20Chrome%2F19.0.1084.36%20Safari%2F536.8
ENTITY:
KEY: f1182195
DENIED REASON: User-Agent claimed to be Googlebot, claim appears to be false.
EXPLANATION: An invalid request was received. You claimed to be a major search engine, but you do not appear to actually be a major search engine.
ERROR: 403
It also appears that a bunch more than normal bad registration attempts and requests like this - //index.php?option=com_user&view=reset&layout=confirm - that are usually blocked are being permitted now. I'm going through my server looking for changes I didn't make and not finding anything so far. I added some spaces in a few spots to not create links.
djkimmel:
Not sure if I should or shouldn't have posted all the stuff above. I did find that the 1 Google IP Bad Behavior block as blacklisted was listed in CBL 9 days ago claiming to be infected with Zeus.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version