Message Board

Newbie/Basic Questions

Python honeypot, Verispider and comment spammers?

Author: M.Nordhoff (19 Dec 08 8:41pm)

This may just be because of the issues with stats, but anyway, I'd like to confirm it:

One of my honeypots, using the Python script (the one on the hostname that begins with B), recently started getting hit by comment spammers, but my PHPot stats still say "0 comment spammers". Is it working? Are you receiving data?

Part of the reason I'm worried is that the Verispider seems to have problems POSTing to both of the Python honeypots on this Lighttpd server, but not to my PHP honeypot on my Apache server:

66.114.197.254 www.example.com - [14/Dec/2008:15:46:02 +0000] "GET /phpot.py?<stuff> HTTP/1.1" 200 900 "-" "PHPot Verispider v0.1 - http://www.projecthoneypot.org/"
66.114.197.254 - - [14/Dec/2008:15:46:02 +0000] "POST /phpot.py HTTP/1.1" 417 0 "-" "PHPot Verispider v0.1 - http://www.projecthoneypot.org/"

(yes, I changed the URLs there, but I didn't change the date/time.)

Re: Python honeypot, Verispider and comment spammers?

Author: M.Nordhoff (19 Dec 08 8:49pm)

On a semi-related note, I also once saw the Python script traceback, but I can't find any record of the corresponding request in my access log.

2008-09-28 06:36:47: (log.c.75) server started
Traceback (most recent call last):
File "/path/to/phpot.py", line 360, in <module>
from_cgi()
File "/path/to/phpot.py", line 355, in from_cgi
print _makeHTML( settings )
File "/path/to/phpot.py", line 328, in _makeHTML
directives[ 4 ] and _getEmailHTML( emailmethod, email ) or "",
File "/path/to/phpot.py", line 169, in _getEmailHTML
1: _formatHTML( __EMAIL1A + m + __EMAIL1B + m + __EMAIL1C ),
TypeError: cannot concatenate 'str' and 'NoneType' objects

(that being the PHPot script on my "c" hostname)

Re: Python honeypot, Verispider and comment spammers?

Author: L.Holloway (29 Dec 08 2:49pm)

The python honey pot script was written by a contributer some time ago. It is one of the few that doesn't support post recording; so any posts to your honey pot won't make it to the project.

If anyone is up for the challenge, let me know. (No need to post your e-mail here; I can look it up.) Otherwise, it looks like I'll be picking up some Python soon... :)

Re: Python honeypot, Verispider and comment spammers?

Author: M.Nordhoff (2 Jan 09 4:00pm)

Shoot, seriously? That's a shame. I've gotten lots of fun comment spam.

Which ones do support it?

(I do know Python, and I'd be happy to help, but I'm not a very good programmer. And I don't read one of my email addresses..)

Edit: Well, relatively lots. Lots for someone whose website usually gets 2 hits a week, not thousands a day or anything.

Post Edited (2 Jan 09 4:01pm)