NetTipsDB

I cannot deny that ProjectHoneypot is really cool. It will track automated web bots, collect all the data of the bot that it can, even any POST data that the bot will send in any forms.

The project participation involve you to put links to a code, hosted on your site’s server. The link will be hidden from human eyes, but visible to the bot. That code is the data collector, that will send the data to central server for statistics. You can view the logs of captured bot by your ‘sensor‘ as well from your account.

This initiative is to collect as much data as it can for these bots. These bots might be a dedicated application that will do all the crawling and POSTing data to your site, or it might be powered by malware, that infect your computer at home. These data will provide some kind of reputation on the IP. You should have a look, and maybe just search your IP in their database, if your IP is listed already.

This project comes alive because of the rising of crawlers and bots that being used for malicious and spamming purpose, on web application. If you happen to have a high reputation site, that have a commenting system, you surely would encounter a situation where you have a thousands of comments to moderate. If you have the IP, just search it in projectHoneypot, most probably the IP is listed there.

However, ProjectHoneypot did not disclose the data as feeds for public use, for other application to retrieve the data automatically. There are similar database, such as StopForumSpam, BotScout, Offensive IP Database and UserAgentStrings.

Previously I’ve wrote an article about retrieving the IP data from certain database through their API. There is a sample code for it. Go Check it out as well.

1. Found a webshell in your server account? It might not be the only one