Trying to understand why this GET is considered ABUSE

Posted: Tue Jun 08, 2004 9:26 pm

I got an Abuse email just like Sentinel is supposed to do, but for the life of me cannot figure out what is wrong with the link that would trigger the Abuse email....

Code:




Date & Time: 2004-06-08 19:42:28


Blocked IP: 68.13.xxx.xxx


User ID: Anonymous (1)


Reason: Abuse - AGENT


--------------------


User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Cox High Speed Internet Customer; T312461; YComp 5.0.0.0)


Query String: www.xxxxxxxxx.com/modules.php?name=News&file=article&sid=213


Forwarded For: none


Client IP: none


Remote Address: 68.13.xxx.xxx


Remote Port: 1303


Request Method: GET


--------------------

If this is a "false" error, then I will unban the IP, but.....just would like to figure out what this actually was/is......

Thanks.

Posted: Tue Jun 08, 2004 9:50 pm

Yes its a false positive I think its the () in the user agent. I just tested it and it bans me too using that user agent.

Edit: No its not the () not sure what triggered that user agent.

Hangin' Around Joined: May 30, 2004 Posts: 46

I had the same problem. The answer is in this post:

Only registered users can see links on this board! Get registered or login!

Posted: Wed Jun 09, 2004 3:52 am

Captain_Computer wrote:

I had the same problem. The answer is in this post:

Only registered users can see links on this board! Get registered or login!

Much obliged! Didn't think to do a search for "Cox High Speed Customer" in the forums....

Thanks!