Just started running sentinel and got this blocked report

New Member Joined: Mar 25, 2006 Posts: 3

I just started running sentinel (2.4.x.x) and just got this blocked report. Can someone explain what this means and why the IP was blocked?
I don't know what "abuse-referer" means and what it implies. Is there any documentation anywhere that explains in detail the various abuses, what the abuser is trying to do and how they are detected?
Thanks
-B
****

Date & Time: 2006-07-16 06:34:35 PDT GMT -0700 Blocked IP: 64.246.178.34 User ID: Anonymous (1)
Reason: Abuse-Referer
String Match: whois.sc
--------------------
User Agent: SurveyBot/2.3 (Whois Source) Query String: [ Only registered users can see links on this board! Get registered or login! ] Get String: [ Only registered users can see links on this board! Get registered or login! ] Post String: [ Only registered users can see links on this board! Get registered or login! ] Forwarded For: none Client IP: none Remote Address: 64.246.178.34 Remote Port: 60643 Request Method: GET
--------------------
Who-Is for IP
64.246.178.34

Site Admin Joined: Jun 04, 2004 Posts: 6432

It's pretty self-explanatory, I think, but it helps to check the online / popup help in your NukeSentinel admin and the NukeSentinel manual, available on this site.

You can set up blockers to prevent people from accessing your site using links on specified sites. Essentially, you're blocking referrers (typically used for making it pointless for certain sites - e.g. adult sites - to link to you).

The manual describes various abuses, though it wouldn't be prudent to detail how they try to do it or how they are detected.