Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™ v2.4.x
Author Message
Nomad
Client


Joined: Jan 21, 2006
Posts: 87
Location: Arizona

PostPosted: Tue Jun 20, 2006 7:57 pm Reply with quote

Can anyone explain to me, what does this mean:

Recently, NS keeps blocking IP's from my site for this reason:
Code:


Reason: Abuse-Script
--------------------
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; cs; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Query String: Only registered users can see links on this board! Get registered or login! blah blah">Blah
Get String: Only registered users can see links on this board! Get registered or login! blah blah\">Blah
Post String: Only registered users can see links on this board! Get registered or login!
Forwarded For: none
Client IP: none
Remote Address: 87.197.210.126
Remote Port: 3024
Request Method: GET


I actually got an email from one guy, saying it was a mistake (a bad link from a forum entry). I ran this through the agent inspector module on RN, and it told me it is trapped by this Harvester entry: download.


  1. This happened 4 times, different IP's/Day. My question is, is this really a mistake, or could they be trying to accomplish something. If so, what?
  2. Also when I check the banned IP section, none of these IP's are listed, but if I run a NS search on that IP, it shows up in the tracked IP section but is not listed as anything else. This is the 4 IP's I got the blocked email: '87.197.xxx.xxx', '68.6.xxx.xxx', '64.124.xx.xx', '24.116.xx.xx'
  3. So next I checked my blocked IP. It only shows 2 IP's, and its none of those 4. '64.246.165.200, 216.145.17.190'
  4. Then I checked my .htacces file NS deny area. It shows 7 IP's, only 2 of those are listed as being blocked in the banned IP section. Also these are not the IP's of the 4 blocked for the download harvestor.
    Code:
    
    
    deny from 64.246.165.200

    deny from 64.246.161.190
    deny from 67.49.10.48
    deny from 70.33.111.91
    deny from 71.53.22.210

    deny from 216.145.17.190
    deny from 64.246.165.210


_________________
Nomad!~!

Last edited by Nomad on Wed Jun 21, 2006 9:17 am; edited 1 time in total 
View user's profile Send private message Visit poster's website AIM Address
gregexp
The Mouse Is Extension Of Arm


Joined: Feb 21, 2006
Posts: 1497
Location: In front of a screen....HELP! lol

PostPosted: Tue Jun 20, 2006 8:46 pm Reply with quote

check ur cnfiguration and im assuming it has somethin to do with the blah blah blah part...if thats the correct string..it may also be a spaceing issue in the url..but im not sure

_________________
For those who stand shall NEVER fall and those who fall shall RISE once more!! 
View user's profile Send private message Send e-mail Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number
Nomad
PostPosted: Tue Jun 20, 2006 9:02 pm Reply with quote

I'm still clueless. Really, this script hacking is new to me, now I see the debate over why some want to know about it, and why some want to not talk about it.

What about these IP's not showing up in the blocked IP list, but are listed in the tracked IP section.
Is there a manual for Nuke Sentinel?
 
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6792
Location: Ha Noi, Viet Nam

PostPosted: Wed Jun 21, 2006 3:36 am Reply with quote

Check your Sentinel Blocker Settings for 'Harvester' to see if it says 'block and....'
 
View user's profile Send private message Send e-mail
montego
Site Admin


Joined: Aug 29, 2004
Posts: 9449
Location: Arizona

PostPosted: Wed Jun 21, 2006 6:21 am Reply with quote

Quote:

Is there a manual for Nuke Sentinel?


Yes. Check this site's "Site Navigation" menu at the top left of the home page. You will find it there...

_________________
Only registered users can see links on this board! Get registered or login!
Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Nomad
PostPosted: Wed Jun 21, 2006 8:03 am Reply with quote

Thank You.

Mine is set to:
Email, Block & Default Page
Write to .htaccess: Yes
Block Full IP
Block Duration: Permanent
 
Guardian2003
PostPosted: Wed Jun 21, 2006 8:17 am Reply with quote

Is it possible the titles of those downloads have apostrophes in them?
The actual url up to where you posted 'blah blah blah' seems quite legitimate to me.
 
Display posts from previous:       
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™ v2.4.x

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©