Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bot]

The tag has no usage guidance.

0
votes
1answer
66 views

Can I assume that an empty user agent will always be a robot?

I want to prevent robots flooding my website and I'm thinking about a ban in these cases... Can I assume that an empty user agent will always be a robot?
0
votes
0answers
41 views

Block hex encoded requests using fail2ban

I have new web server running nginx. The default server is receiving 10K+ requests every day from Russian bots. They are clearly probing for something, but it's hard to say what since the requests ...
6
votes
2answers
1k views

Anti-bot JavaScript library identification

I'm doing a research on anti-bot measures that websites can use to prevent automation. I came across a JavaScript library and I'm trying to identify its origin. At first I thought it's a site specific ...
1
vote
0answers
89 views

Strange crawl requests from google bot

My Wordpress web site recently had a strange crawl link from Google. This is the list of crawl errors on my Google Webmaster Tools page: Are these normal requests from google, or has my website been ...
1
vote
1answer
176 views

limit malicious log in attempts on wordpress site

Following my previous question, I have installed an "activity log" plugin on my site, from this I can see several malicious log in attempts. In above image we can see a new attempt each second, these ...
2
votes
0answers
88 views

How does Mirai (or any IoT malware) perform the initial infection? [duplicate]

From what I understand, Mirai and other related IoT malware use already infected bots to perform the scanning of various IPs for open ports to find potential new victims. How is the first bot infected ...
0
votes
1answer
516 views

Some bot keeps posting this to my server

Some bot keeps posting strings like this to my server. What do they mean and what's the best way from preventing them? RaxfkI/...
0
votes
0answers
38 views

Bot tinkering/abusing with a web application's invite mechanism - why?

We have an app where a user can invite a colleague to collaborate. This is done via a simple form with a text field where you need to enter the colleague's email and press "send invite". Today we ...
3
votes
0answers
63 views

Prevent developer/owner from seeing user data with insecure API

I am building a chatbot for my university in GroupMe, which very popular there. The bot will, for example, allow users to send messages to their chat groups like /menus (assuming that "/" is the ...
12
votes
3answers
6k views

What can I do after an attack to our system that hit our login route?

This morning I checked our nginx logs. 46.x.x.90 - - [17/Jul/2017:05:51:31 +0000] "HEAD http://x.x.71.1:80/PMA2011/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 Jorgee" "-" 46.x.x.90 - - [17/Jul/2017:05:51:31 +...
0
votes
0answers
2k views

Bot called “gweerwe323f” accesing ssh?

we've got an abuse mail to our server that says 'your server is attempting to hack ssh of another server etc...'. Then we've checked our server and in History command we've seen some logs as shown ...
1
vote
0answers
48 views

Detecting cloaking at the client side

According to this paper(reference: section IX), it may be possible for clients to detect cloaking. It basically says, whenever you fetch a page from a url(assumed to clicked from the search results),...
1
vote
0answers
91 views

Determining the person responsible for a bot [closed]

We have recently discovered that a third party has been using a bot to manipulate traffic on one of our websites. We have gathered enough information to determine that the traffic is indeed a bot, and ...
2
votes
0answers
152 views

Potential Issues and downfalls of the “honeyPot” in asp.net mvc

Within the last few weeks I have been noticing massive amounts of bot traffic coming out of a small geographical area. I have implemented the robots.txt into my ASP.net project, but as I understand it,...
4
votes
1answer
580 views

Why aren't telnet bots finishing the three-way handshake?

I have a port forwarding rule sending 23 traffic to a "honeypot" (called "comp" below). Throughout the night, many bots from around the world attempted to connect, but there was no service running. ...
0
votes
3answers
1k views

What is most secure CAPTCHA system? [closed]

Artificial intelligence has now become a real security threat, some bots using advanced algorithms can solve even the most distorted of CAPTCHAS text at a high accuracy. Assuming that I'm ...
0
votes
3answers
509 views

How to tell if human is using website or automated script?

I know some websites say in their terms and services that the website can only be accessed by humans and not bots or scripts. How do they tell who is accessing? Especially with tools such as ...
2
votes
1answer
226 views

What does this suspicious activity in my log suggest?

I found following log lines on my asterisk program (VoIP) running on debian Jessie server 3.4.112 for arm [2016-12-25 01:58:52] NOTICE[12054] res_pjsip/pjsip_distributor.c: Request 'INVITE' from '"...
0
votes
1answer
326 views

How to avoid a bot getting caught? [closed]

I'm making a bot to scrape data from a website for study purposes. But I don't want them to catch it and block my ip. Basically what I do is scraping few images and few lines of texts.(using dom and ...
5
votes
1answer
491 views

I ran netstat and one thing that came up was MSN bingbot, does that mean my computer is being used as part of a Microsoft botnet?

I ran netstat on my computer, and one thing that came up was msnbot-65-52-108-216. I did some research and what came up was that it's from an IP originating in Redmond, Washington and that it's likely ...
0
votes
3answers
339 views

My Laptop has outgoing UDP packets on high numbered ports several times a second

I originally noticed this on my router firewall, so I installed Zone Alarm in order to look more closely, and now I can see it in the ZA logs. I have run virus scans from Kaspersky, Trend Micro, & ...
3
votes
3answers
3k views

Unknown bot using Firefox 40.1 user-agent

What bot is generating this user-agent? Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1 There was no Firefox version 40.1 From website logs (a) it only ever requests the ...
0
votes
0answers
88 views

Frequency of Stealth scan?

Background I am working on snort Portscan Module to detect Stealth scans.Snort uses good amount of datastructures to capture scanning events and to explicitly set the threshold values. typedef ...
0
votes
1answer
493 views

How to create a bot-engine [closed]

I requested a feature and the voting is currently in progress, which I believe has been hacked, and heavily down-voted. I believe the hacker might have taken the following steps to achieve this: ...
6
votes
3answers
1k views

How bot(s) have guessed my wordpress login page?

I have a wordpress site (fully patched) that used to receive many attempts to log in based on dictionary attacks. I changed my admin user to something uncommon and use a really strong password. ...
30
votes
4answers
26k views

Should I block the Yandex Bot?

I have a web application that the Yandex spider is trying access into back-end a few times. After these spider searching, there are few Russian IP addresses that try to access back-end too and they ...
21
votes
3answers
5k views

How does a company like CloudFlare block bot crawling and email harvesters?

I saw this on CloudFlares homepage: CloudFlare protects against a range of threats: cross site scripting, SQL injection, comment spam, excessive bot crawling, email harvesters, and more. How could ...
2
votes
0answers
807 views

Is possible to prevent input emulation with SetWindowsHookEx in specific application?

The one of technique of input emulation protection with automation toools like AutoIt or ACTools used most of simple game bot programs is SetWindowsHookEx usage WH_KEYBOARD_LL flags. This solution is ...
6
votes
3answers
393 views

Crawler massively changing user-agent

This morning I noticed a single IP-address was kinda crawling my website, though it was querying the same page many times in a few minutes. Then I noticed that it was doing that with different user-...
1
vote
3answers
864 views

How can I create a research botnet within VMware?

For educational purposes I am attempting to create a botnet within VMware making use of 3 or 4 machines (So I can attack a 5th virtual machine using this botnet), but the issue I'm facing is I can't ...
3
votes
3answers
1k views

iptables rule to ban and redirect malicious traffic

I'm running Apache 2 and after analysing the access_log I discovered that my website is visited more than 800 times a day (today 924) from majestic.co.uk bot. The bot use this range of IP addresses: ...
1
vote
2answers
556 views

Protecting server from bogus HTTP Requests

What would be the recommended approach to block those typical bogus HTTP requests that the server gets bombarded with? Also has this attack/nuisance been named yet or is it generalized as Bot Activity?...
3
votes
1answer
9k views

Zeus botnet source code

I am doing my project on botnets and wanted to understand the source code of the Zeus botnet. Where is the right place to get started with some analysis of zeus botnet source code? I need a good ...
3
votes
1answer
243 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either of ...
2
votes
2answers
1k views

How can an attacker access a system with a private IP address? [closed]

I am confused about this concept if a public IP is assigned to my router and my system has private IP address, how an attacker can access my system or can use my system as a BOT. Its a common scenario ...
54
votes
4answers
47k views

How does Google's “No Captcha reCaptcha” work?

Google has released a new form of captcha identification of bots, that asks the user to click a single checkbox. It uses image-based verification only if necessary. Could someone please explain to me ...