Question

Posted: Fri Sep 24, 2004 2:51 pm

Just got this from Sentinel and was wondering what it ment. This is the first of its type I have seen:

Code:

Date & Time: 2004-09-24 16:39:09


Blocked IP: 12.19.225.242


User ID: Lucy (34)


Reason: Abuse-Script


--------------------


User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; FunWebProducts)


Query String: www.diabetesbytes.com/modules.php?name=News&file=friend&op=StorySent&title=Men%27s+Rules+%28that+women+should+know%29&fname=Dolores


Forwarded For: none


Client IP: none


Remote Address: 12.19.225.242


Remote Port: 33856


Request Method: GET


--------------------


Who-Is for IP


OrgName:    AT&T WorldNet Services


OrgID:      ATTW


Address:    400 Interpace Parkway


City:       Parsippany


StateProv:  NJ


PostalCode: 07054


Country:    US








NetRange:   12.0.0.0 - 12.255.255.255


CIDR:       12.0.0.0/8


NetName:    ATT


NetHandle:  NET-12-0-0-0-1


Parent:


NetType:    Direct Allocation


NameServer: DBRU.BR.NS.ELS-GMS.ATT.NET


NameServer: DMTU.MT.NS.ELS-GMS.ATT.NET


NameServer: CBRU.BR.NS.ELS-GMS.ATT.NET


NameServer: CMTU.MT.NS.ELS-GMS.ATT.NET


Comment:    For abuse issues contact abuse@att.net


RegDate:    1983-08-23


Updated:    2002-08-23








TechHandle: DK71-ARIN


TechName:   Kostick, Deirdre


TechPhone:  +1-919-319-8249


TechEmail:  help@ip.att.net








OrgAbuseHandle: ATTAB-ARIN


OrgAbuseName:   ATT Abuse


OrgAbusePhone:  +1-919-319-8130


OrgAbuseEmail:  abuse@att.net








OrgTechHandle: ICC-ARIN


OrgTechName:   IP Customer Care


OrgTechPhone:  +1-888-613-6330


OrgTechEmail:  qhoang@att.com








OrgTechHandle: IPSWI-ARIN


OrgTechName:   IP SWIP


OrgTechPhone:  +1-888-613-6330


OrgTechEmail:  help@ip.att.net

Thanks

registered · Posted: Fri Sep 24, 2004 3:02 pm

%28 and %29 are the open and close parenthesis and I do believe that is what it caught as the "abuse", you need to take out parenthesis in your weblinks and downloads and use brackets instead if you don't want to get your users banned for clicking your own links.....

Posted: Fri Sep 24, 2004 3:08 pm

I can't find anything odd in any of the links.

Here is the link:

http://www.diabetesbytes.com/modules.php?name=News&file=categories&op=newindex&catid=3

http://www.diabetesbytes.com/modules.php?name=News&file=article&sid=11&mode=&order=0&thold=0

I have no idea where that link is where the user used

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

If you go to the Comments link on a new's story, there is a link in the right hand column called Send to a Friend in the Option's block. That's where the link is from.

Posted: Fri Sep 24, 2004 3:54 pm

here is the link I have:

http://www.diabetesbytes.com/modules.php?name=News&file=friend&op=FriendSend&sid=11

If I try and test the link myself is there a chance that Sentinel will block me or is my IP protected in any way from this sort of thing?