vBulletin LTS

@byssGuard - Protection Suite
Mod Version: 3.2.3, by TheSupportForum

How does it work?

AbyssGuard matches the actions and IP addresses of the visitors against predefined lists with malicious actions thus preventing them from viewing your website. The IP matching is done via the http:BL service of Project Honey Pot. in some cases you will find that Googlebot will show as referer spam, this "DOES NOT" mean it is blocked the only blocked activity is and must be on their httbl list

here's an example
if someone pass Google User Agent it’s being checked. First the httpBL of Project Honey Pot matches up the IP against their database, if it’s Google they’ll know and further execution of the script will be terminated. If they don’t recognize it as Google or you don’t have this option enabled, the script will check if the given user has passed a Referer. Google and any other major Search Engine will NEVER pass a referer, so it’s most possibly a referer spammer disguised as Google.

legitimate Googlebot not to pass header Accept and I have information for one more case where it accepted a cookie. But if Google can’t access a page they try again the next second with different IP and the right tags. Generally nothing to worry about

Furthermore you can check from https://www.google.com/webmasters/tools/ if your web site is accessible by Googlebot, just to be sure.

Requires:

Server that can run PHP.

this will run on every vbulletin board version from VB4, VB3 has not been tested

signup with http://www.projecthoneypot.org?rf=114692

if you are a developer and using this mod, if you have rewrote any part of this and wish to share to help the improvement of this please PM me, you will be added to
CoAuthor / Supporter Section.

VERSION 3.2.2 RELEASED

Implemented is as follows
AbyssGuard Protect : Core Product

https://bad-behavior.ioerror.us/download/
Ban Crawlers ( Spiders )
^ - Optional : Create Thread
^ - Optioanl : E-mail Notification
Ban IP's / Ranges
^ - Optional : IP visit E-mail Notification
Bot Registration Prevention
Thread Creation on Crawler activity
^ Thread Selection : list of forums shown
^ Thread Username : Admins,Mods,Super Mods selectable on list (thx to kh99's help)
Email Filter - Allow only certain TLD's to register
http://www.vbulletin.org/forum/showthread.php?p=2378046 - Prevent Number only registrations

-------------------------------------------------------------------------------------------------------------
Version History

3.2.2 - 11/11/12 - some added extras
3.2.3 - 12/11/12 - some added extras
Current Bugs
3.2.2 - Scheduled Task does not run automatically, this will be fixed in next release
3.2.3
-------------------------------------------------------------------------------------------------------------

Common Issues / Checks
Before reporting any bugs / issue please ensure you have overwritten all files
each version we cleanup code an can cause hidden errors
Reporting issues about IP address is not a bug you will need to contact https://www.projecthoneypot.org/contact_us.php for legitimate IP removal

They can not unblock referer spam, this is cookie based spam going to your website from a users cookie

-------------------------------------------------------------------------------------------------------------
The technical stuff

ensure that allow_url_fopen is enabled for your php ( Available since PHP 4.0.4 ) ( if this is not enabled then the log file can not be created, you will need to ensure that you create the file manually) if you have cpanel you can enable it

ensure that safe_mode & safe_mode_gid are off in php settings

confirmed to be working on
php versions: 5.2.17, 5.3.15
MySQL Version: 5.5.23-55
vBulletin Versions: 4.1.12, 4.2.0
--------------------------------------------------------------------------------
Suggestions / Requests

if you want to help improve this mod please make a suggestion and we'll see how we can incorporate your ideas

Please be aware we can not improve the API system for projecthoneypot

--------------------------------------------------------------------------------
DID YOU KNOW : Referer Spam
(also known as log spam or referrer bombing[1]) is a kind of spamdexing (spamming aimed at search engines). The technique involves making repeated web site requests using a fake referrer URL that points to the site the spammer wishes to advertise.[2] Sites that publicize their access logs, including referrer statistics, will then inadvertently link back to the spammer's site. These links will be indexed by search engines as they crawl the access logs.This benefits the spammer because of the free link, which gives the spammer's site improved search engine ranking due to link-counting algorithms that search engines use.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
DID YOU KNOW : Bad Cookies
These types of cookies can be used to store and track your activity online. Cookies that watch your online activity are called malicious or tracking cookies. These are the bad cookies to watch for, because they track you and your surfing habits, over time, to build a profile of your interests. Once that profile contains enough information there is a good chance that your information can be sold to an advertising company who then uses this profile information to target you with interest specific adverts.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
if you are browsing your website with bad cookies on your computer it can crawl your website in disguise of a search engine, they use legitimate cookies which holds legitimate search engine IP's to crawl your website for information this is why the logvier will show them as referer spam

Copyright ©2012 The Support Forum, All Rights Reserved. you have only permission to use, not copy modify sell or distribute this software IN NO EVENT SHALL http://www.thesupportforum.co.uk/forum.php BE LIABLE FOR DAMAGE TO CODE, OR MODIFIED VERSION NOT MADE BY OUR CODING TEAM we will support only the unmodified versions on request from this thread or our website