kojhumans - A tool to differ between humans and bots.
kojhumans <log file> {--by-session|--by-ip}
The script works as follow: We, the humans, are clumsy. The script seeks for SUPR and BACKSPACE characters in the executed commands. The script also checks if the intruder tried to change the window size.
$ ./kojhumans log.txt --by-session
Typo error filter: Session with id 2952 opened by a human
1 human session(s) total
$ ./kojhumans log.txt --by-filter
Typo error filter: Human detected at 81.33.84.225 (ES, Spain)
Jose Antonio Coret <joxeankoret@yahoo.es>
kojreport(1) kojreport-filter(1) kip2country(1)