*HTTP_REFERER* Abuse (a rare form) : IP recorded

Posted: Sun Oct 24, 2004 11:29 am

Cheers,

Thought I post my observation here, as I passed through some logs - this has been discussed in the Forums for some time ago, but as this phenomenom re-appeared, here's the summary:

This is not a critical one, but more like a source of annoyance to see this kind of information being thrown into the list of *HTTP_REFERER*s, as it breaks down the frontpage struct due to vast string length, when using actively *Last Referers* Block;

Quote:

---------------------------
--- PAGE ACCESS NOTICE ---
---------------------------
ABUSE DATE&TIME : 10/21/2004 20:49:47
IP ADDRESS : 67.84.128.221
HTTP HOST : www.ec-clan.org
HTTP REFERER : XXXX:++++++++++++++++++++++++++++
FROM IP ADDRESS : [my_server_ip_address]
ALERTING SRC FILE : [tracked_web_page]

I can see no other reason for the above reported as; (#1) this "entity" is just being *nasty*, or (#2), including the (#1), but limitted to it, this "entity" is concealing the *HTTP_REFERER* information along with the possibly spoofed IP (latter meaning, this *entity* is not in the mood for glove-free handshakes for whatever the true motive is...)

Anyways, banned the IP to see whether it would have an end to it.

BR,

-beetraham

Posted: Sun Oct 31, 2004 6:37 pm

Good call

-sting