Codezwiz >> Forums >> General PHP Nuke Help >> Sentinel Tracked IP Explanation

i was searching through the tracked ip address and just happened to view one of the ip address and it shows they where trying to access this link.does anyone have and explanation as to what they where doing....cause it seems to me like they where up to no good..

http://aussieonlinegamers.ausaa.net/modules.php?name=Your_Account&username=stop9578@aussieonlinegamers.ausaa.net@aussieonlinegamers.ausaa.netContent-Transfer-Encoding:%20quoted-printableContent-Type:%20text/htmlSubject:%20the%20things%20they%20ebcc:%20mika1810@werndgains.comthe%20chamblized%20in%20a%20verythin%20ancient%20is%20only%20just%20good%20his,%20he%20effects%20of%20t=her%20parth%20of%20the%20named%20into%20larged%20to%20of%20use%20m%20somenside%20latickle%20not%20fore%20=yeah,%20what%20movere%20locallianter%20gree.%20ou%20shously.%20what.%20ou21be363030976d8f21be229b684e7971.&Register=stop9578@aussieonlinegamers.ausaa.net&gfx_check=stop9578@aussieonlinegamers.ausaa.net&random_num=stop9578@aussieonlinegamers.ausaa.net&login=stop9578@aussieonlinegamers.ausaa.net&op=stop9578@aussieonlinegamers.ausaa.net

I converted all %20 to a space cause thats what it is suppose to signify. Still no idea what the secret message is.

I almost want to say its a poor attempt at cross site scripting, but it looks more like a spam bot problem.

this might sound stupid but is there a list out there somewhere that people have compiled that you can import into sentinel for blocking purposes..

Sorta, their is ip2country updates which you should stay regular with and a lot of people give instructions on blocking certain countries which have proven theirselves dangerous.

As far as just a list, no. You will build your own list very shortly.

thanks m8.....i think

Ok then what about this little script.It could be run and the output copied to a text document for uploading and sharing.

<?php

######################################################################
# Retrieving IP Address's From nsnst_blocked_ips
#
#
# Configure your database and SQL details and upload
# to your root directory.Dont forget to remove it straight away
# As it is a security risk.
#
# dbhost: SQL Database Hostname
# dbuname: SQL Username
# dbpass: SQL Password
# dbname: SQL Database Name
#
######################################################################

$dbhost = "localhost";
$dbuname = "******";
$dbpass = "******";
$dbname = "******";

// Make a MySQL Connection
mysql_connect("$dbhost", "$dbuname", "$dbpass") or die(mysql_error());
mysql_select_db("$dbname") or die(mysql_error());

// Retrieve all the data from the "example" table
$result = mysql_query("SELECT `ip_addr` FROM `nuke_nsnst_blocked_ips`;")
or die(mysql_error());

// store the record of the "example" table into $row
$row = mysql_fetch_array( $result );

// Print out the contents of the entry
while($row = mysql_fetch_array($result)){
echo $row['ip_addr'];
echo "<br />";
}

?>