Why did NukeSentinel ban this?

New Member Joined: Jun 17, 2004 Posts: 10

Hi, Ive got this member at my site posting on behalf of another member who was banned automaticaly by sentinal.

Code:

Blocked IP: 68.63.223.129 


User: Anonymous 


Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Cox High Speed Internet Customer; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 


Abuse Blocked on: 2004-08-25 00:50:35 


Notes: Added by Sentinel™ 


Reason: Abuse - AGENT 


  


Query String: [ Only registered users can see links on this board! Get registered or login! ] 


Forwarded For: none 


Client IP: none 


Remote Address: 68.63.223.129 


Remote Port: 1271 


Request Method: GET

Usually the Query String gives more info if the bam was malicious in nature.

From the above ban report, can anyone tell me if this person needs to be kept banned or does it look safe enough to unban?

Thanks in advance.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

The reason for the ban is
Reason: Abuse - AGENT

If you run that Agent string through my Agent Inspector, it reveals

Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Cox High Speed Internet Customer; .NET CLR 1.0.3705; .NET CLR 1.1.4322) is trapped by this Harvester entry: custo

Remove 'custo' from the Harvester list and it will let it by.

Posted: Thu Sep 02, 2004 2:22 pm

Thanks Raven,
btw:
What does custo stand for?