Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™
Author Message
Bluezzz
Involved
Involved


Joined: Feb 08, 2005
Posts: 290
Location: USA

PostPosted: Fri Mar 11, 2005 3:42 pm Reply with quote

Can someone tell me if this is a legit ban (actually two of them) or what? If not legit then I'd like to unban them. Is there a list of legit banned IPs one can look at?

Date & Time: 2005-03-11 07:22:50
Blocked IP: 64.124.85.79
User ID: Anonymous (1)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (compatible; BecomeBot/1.83; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)
Query String: mysite.com/myphpnuke/modules.php?name=Web_Links&l_op=ratelink&lid=11&ttitle=mylinkhere
Forwarded For: none
Client IP: none
Remote Address: 64.124.85.79
Remote Port: 58315
Request Method: GET
--------------------


and the other was from ...


Date & Time: 2005-03-11 12:23:58
Blocked IP: 64.124.85.210
User ID: Anonymous (1)
Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (compatible; BecomeBot/1.83; MSIE 6.0 compatible; +http://www.become.com/site_owners.html)
Query String: mysite.com/myphpnuke/modules.php?name=Web_Links&l_op=ratelink&lid=11&ttitle=mylinkhere
Forwarded For: none
Client IP: none
Remote Address: 64.124.85.210
Remote Port: 58053
Request Method: GET


Both *attacks* were listing legit urls in my Web Links section : o/ Is this a search bot/spider or what? Seems someone's trying to access links on my site? Help / info please? Thanks!

I have yet to do Diva's change to my ban pages, I got lazy LOL

_________________
Bluezzz
~ Stop & smell the roses, while you can! ~ 
View user's profile Send private message
sixonetonoffun
Spouse Contemplates Divorce


Joined: Jan 02, 2003
Posts: 2496

PostPosted: Fri Mar 11, 2005 10:47 pm Reply with quote

What is the title of the link? The reason givin is Abuse-Script so I would be suspicious of the title of the web link. Not to say its not an attack but like you point out it appears to be a legitimate request.

_________________
[b][size=5]openSUSE 11.4-x86 | Linux 2.6.37.1-1.2desktop i686 | KDE: 4.6.41>=4.7 | XFCE 4.8 | AMD Athlon(tm) XP 3000+ | MSI K7N2 Delta-L | 3GB Black Diamond DDR
| GeForce 6200@433Mhz 512MB | Xorg 1.9.3 | NVIDIA 270.30[/size:2b8 
View user's profile Send private message
Bluezzz
PostPosted: Sat Mar 12, 2005 4:15 am Reply with quote

They are web links I set up in my Web Link section ... I just changed the urls above for privacy sake is all ... the urls stated as titles were correct.
 
sixonetonoffun
PostPosted: Sat Mar 12, 2005 8:45 am Reply with quote

What I meant were there odd chars like () in the title of that particular link title?
 
Bluezzz
PostPosted: Mon Mar 14, 2005 4:05 am Reply with quote

Sorry took so long to reply. You mean these?

CBSnews_(USA) and
CBC_(Canada)

Those are the two descriptions that I replaced with *mylinkhere* ... would the underscore be causing a problem because I don't remember adding an underscore : o/
 
Raven
Site Admin/Owner


Joined: Aug 27, 2002
Posts: 17077

PostPosted: Mon Mar 14, 2005 8:22 am Reply with quote

It has been documented here NUMEROUS times that both nuke and NukeSentinel block the () in links. That is for security reasons. Search the forums for more information.
 
View user's profile Send private message
Bluezzz
PostPosted: Mon Mar 14, 2005 4:01 pm Reply with quote

Ah OK seems I missed that, I'm sure I've missed alot tho ... tis a newbie thing. I'll go into those and take off the brackets and unblock the IPs. Thanks.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©