Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™
Author Message
kenwood
Worker
Worker


Joined: May 18, 2005
Posts: 119
Location: SVCDPlaza

PostPosted: Tue Jun 06, 2006 2:39 pm Reply with quote

I am using RavenNuke76(tm) Version 2.02.02 and sins i update sentinel to 2.4.2pl6 i get strange Tracked IP's like
USS Enterprise/ and HTTP/1.1 (Veloc
The HTTP/1.1 (Veloc are from users of aol.com the USS Enterprise/ i don't no.
The problem is there with 2.4.2pl6 and 2.4.2pl7 .
All users from aol.com give me the same problem.
I am now gone test 2.4.2pl8 and look if i get the same problem.
 
View user's profile Send private message Visit poster's website
kguske
Site Admin


Joined: Jun 04, 2004
Posts: 6383

PostPosted: Tue Jun 06, 2006 2:45 pm Reply with quote

Is that the IP or the user agent?

_________________
I google, therefore I exist...
Only registered users can see links on this board! Get registered or login!
 
View user's profile Send private message
kenwood
PostPosted: Tue Jun 06, 2006 2:48 pm Reply with quote

It is the ip address on the ABTracked page and with 2.4.2pl8 a new one came 1.0 proxy4.tkda and 1.0 w3cacheB.do and 1.1 SERVER
 
kguske
PostPosted: Tue Jun 06, 2006 3:02 pm Reply with quote

That is strange. Is it like that for every IP?
 
kenwood
PostPosted: Tue Jun 06, 2006 3:06 pm Reply with quote

No the most ip's are normal but some visiters that come by a proxy sentinel gives the proxy name in the ip field.
 
kguske
PostPosted: Tue Jun 06, 2006 3:33 pm Reply with quote

Ah. It could be possible that these users are spoofing their proxy, but I'll point this out to the Sentinel developers so they are aware of it.
 
kenwood
PostPosted: Fri Jun 09, 2006 4:26 am Reply with quote

With 2.4.2pl9 the problem is stil there .
 
kguske
PostPosted: Fri Jun 09, 2006 5:44 am Reply with quote

I wish I could tell you this was high on the priority list.
 
kenwood
PostPosted: Sat Jun 10, 2006 4:40 am Reply with quote

I did some research and came with the next conclusion
HTTP/1.1 (Veloc = 205.188.117.8 - - [10/Jun/2006:04:28:17 +0200] "GET /modules.php?name=Advertising HTTP/1.1" 200 3960 "-" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322)"

1.1 router:800 = 193.77.9.140 - - [09/Jun/2006:21:56:57 +0200] "GET /modules/Your_Account/images/info.png HTTP/1.0" 200 3070 "http://xxx.com/modules.php?name=Your_Account&op=userinfo&bypass=1&username=podgozdnik" "Mozilla/5.0 (Windows; U; Windows NT 5.1; sl-SI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7"

1.1 beton.met. = 217.153.166.20 - - [10/Jun/2006:10:25:51 +0200] "GET /modules.php?name=Your_Account&op=userinfo&bypass=1&username=Bols HTTP/1.0" 200 4404 "http://xxx.com/modules.php?name=Your_Account" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

1.0 MARTE = 200.91.235.115 - - [10/Jun/2006:00:33:53 +0200] "GET /modules.php?name=Your_Account&op=userinfo&bypass=1&username=RiPeMach HTTP/1.1" 200 20765 "http://xxx.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"

I can go on like this but the main thing is that my accesslog gifs me a ip addres and sentinel not
 
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6792
Location: Ha Noi, Viet Nam

PostPosted: Sat Jun 10, 2006 5:33 am Reply with quote

My understanding of this is that the server will report the IP address that it see's in the data packet, which can be spoofed - in other words, what the server reports may not be what the true IP address is.
Sentinel will, if possible try to determine the true IP and if it cannot, then the useragent so you can at least block by the useragent which will be accurate data rather than trying to block an IP who's accuracy might be in question.
 
View user's profile Send private message Send e-mail
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©