First Block - Have a problem with Submit News Now

Posted: Thu Jun 24, 2004 8:14 am

Well I just loaded Sentinel two days ago and received my first block Cool

from my email:

Quote:

Date & Time: 2004-06-24 09:53:38
Blocked IP: 209.167.50.22
User ID: Anonymous (1)
Reason: Abuse - AGENT
--------------------
User Agent: LinkWalker
Query String: www.averagefan.com/index.php
Forwarded For: none
Client IP: none
Remote Address: 209.167.50.22
Remote Port: 11589
Request Method: GET

I noticed the Sentinel Block is listing the IP address with the WHOIS:

Quote:

Country: Unknown

Looking up !NET-209-167-50-16-1 at whois.arin.net.

NOTE: More information appears to be available at RB93-ARIN.

Using cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).

OrgName: SevenTwentyfour Incorporated
OrgID: SEVENT
Address: 15 Annis Road
City: Scarborough
StateProv: ON
PostalCode: M1M 2Y8
Country: CA

NetRange: 209.167.50.16 - 209.167.50.31
CIDR: 209.167.50.16/28
NetName: NET-SEVEN24AUU1
NetHandle: NET-209-167-50-16-1
Parent: NET-209-167-0-0-1
NetType: Reassigned
Comment:
RegDate: 1998-04-17
Updated: 2002-03-13

TechHandle: RB93-ARIN
TechName: Bryant, Roy
TechPhone: +1-416-269-7744
TechEmail: ********@seventwentyfour.com

OrgTechHandle: RB93-ARIN
OrgTechName: Bryant, Roy
OrgTechPhone: +1-416-269-7744
OrgTechEmail: ********@seventwentyfour.com

# ARIN WHOIS database, last updated 2004-04-15 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.

[If E-mail address(es) were hidden on this page, you can click here to get the results with the E-mail address.

First, what do I do with this info?

Second, I was trying to submit an article and the script kept messing up. Would this attack cause this? I could initially see the preview, but some of the lines are combined with the directions. It will not let me make changes and preview them or submit the article. I have the NukeStyles Submit_News module and I even tried reloading the original index.php I have backed up. I'm running 7.0.

Thanks

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

This not an 'attack', per se. Note these two items

Reason: Abuse - AGENT
--------------------
User Agent: LinkWalker

LinkWalker is a known harvester and that's why it got caught.

And no on the second question. To verify, just comment out the include statement in the mainfile.php and try to submit the article.

Posted: Thu Jun 24, 2004 8:48 am

Thanks, I just found that same reason in your forum here. Guess I should've read on more before posting. Rolling Eyes

Thanks

Posted: Thu Jun 24, 2004 8:59 am

Hey Raven,
Can you check my site?
Only registered users can see links on this board! Get registered or login!
In the top left is the Sentinel Block and the name Sentinel has been changed Question

Posted: Thu Jun 24, 2004 9:02 am

Looks like you may be missing the language files. Also, what theme is that and where can I get it?

Posted: Thu Jun 24, 2004 9:07 am

Do you know which language files? And where did they go? It was fine earlier when I sent this post. Exclamation

The Theme is called blue_plus, I don't remember where I got it from, but I do still have the downloaded zip file I can send you Wink

Posted: Thu Jun 24, 2004 9:17 am

Try reuploading the v1.2 files.

Please send the theme to raven (at) ravenphpscripts (dot) com

Thanks!

Posted: Thu Jun 24, 2004 9:18 am

Also in Admin on the Sentinel link which now says:

Quote:

_AB_ADMINISTRATION

I get:

Quote:

Fatal error: Call to undefined function: abget_configs() in /****/********/public_html/admin/modules/sentinel.php on line 32

Posted: Thu Jun 24, 2004 9:28 am

I reloaded Sentinel and everything is fine now.

I sent the theme also. Smile

Thanks for all your help!

Posted: Thu Jun 24, 2004 9:34 am

swede wrote:

Also in Admin on the Sentinel link which now says:

Quote:

_AB_ADMINISTRATION

I get:

Quote:

Fatal error: Call to undefined function: abget_configs() in /****/********/public_html/admin/modules/sentinel.php on line 32

That usually means the include("includes/sentinel.php") statement is missing in mainfile.php.