Sentinel Blocks

Worker Joined: Dec 22, 2005 Posts: 158

Hey guys I keep getting these blocked ip's in sentinel.

User: Anonymous
Agent: SurveyBot/2.3 (Whois Source)
Blocked on: 2006-02-13 11:47:58
Notes: Added by NukeSentinel(tm)
Reason: Abuse-Referer

Query String:
Get String:
Post String:
Forwarded For: none
Client IP: none

Remote Port: 52171
Request Method: GET

User Agent: SurveyBot/2.3 (Whois Source)

Query String: www.microkey.biz/index.php

Get String: www.microkey.biz/index.php

Post String: www.microkey.biz/index.php

I took out the ip address out. Is this a real security threat? It says Reason, Abuse-Referer, does that mean someone came to my site from a reference to another site and how would I find the site that refered it from the ip address? Should I take any action, like writing the host of the user and informing them of the abuse? Just not sure if I need to do anything about this. Thanks for the help.
Taz

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Look in your referer blocker list. These are known to be 'bad' bots. You can add or remove bots from the list as you see fit. Google for the bot name and decide for yourself.

Posted: Mon Feb 20, 2006 10:48 am

Sorry Raven, I feel a little thick because all of these blocked ip addresses say Agent: SurveyBot/2.3 (Whois Source), and I have opened the referer block configuration and I don't really know which item there is the one being mentioned. I thought I was looking for something called survey blocker, but that's not in there. Am I missing something?
probably Smile

Posted: Mon Feb 20, 2006 11:01 am

Look in both harvester and referer blocks for
SurveyBot and/or WhoIs.

Posted: Mon Feb 20, 2006 12:35 pm

I googled the Survey Bot, seems kind of harmless. It was in the referers list as whois.sc. I checked out http://www.whois.sc/info/webmasters/surveybot.html and it tell you that you can opt out of crawling by putting this in your robots.txt file.

User-agent: SurveyBot
Disallow: /

you probably know this raven, I'm just sharing info Smile

Thanks again for the help!

Regular Joined: Jun 09, 2004 Posts: 79

Taz wrote:

I googled the Survey Bot, seems kind of harmless. It was in the referers list as whois.sc. I checked out http://www.whois.sc/info/webmasters/surveybot.html and it tell you that you can opt out of crawling by putting this in your robots.txt file.

I have had this bot excluded in my robots.txt file from day one, but it makes no difference - they still try to crawl. I get this message from Sentinel at least once a week.

Posted: Mon Mar 06, 2006 4:24 pm

lol Now that you mention it, I noticed that it is still coming up on my site too. Oh well. . .

registered · Posted: Tue Mar 07, 2006 5:23 am

That is why it is considered a "Bad Bot".