Web Hosting Talk







View Full Version : CGI script Spamming


gertiebeth
01-28-2002, 12:24 AM
A URL submitter service has added my "free-for-all" links script to its submission process. Now I get 500+ URL submissions an hour, all unrelated to the topic of my website. The auto-submissions are causing my server to crash at least once a day because of SYN flooding.

To help find out what submission service this is, I have re-named the original script and changed the auto-script to a Perl script called "CallerID" so I can gather information about the users.

Now, my question... Here is an example of the information the script is sending:

time: 2002-01-28T03:50:53+00:00
host: adsl-83-220-128.asm.bellsouth.net
address: 65.83.220.128
browser: MSIE 5.5
os: Windows 95
user:
proxy:
gateway:
fingertext: 'adsl-83-220-128.asm.bellsouth.net' did not respond
referer: http://www.celebrity-exchange.com/
finger: 0
languages:
cookies:
username:
identity:
hostname: adsl-83-220-128.asm.bellsouth.net
gatewayaddress:
gatewayport:
maybehost:
fingertext: 'adsl-83-220-128.asm.bellsouth.net' did not respond
requesturi: /links/directory/add.cgi

How exactly do I read this and how can I proceed to find out who this person is?

BTW, all of the "referer" URLs are coming back as http://celebrity-exchange.com which is actually me. I had hoped this section would lead me right to them, but no dice... and I do not have webalizer.

Thanks in advance...

priyadi
01-28-2002, 04:44 AM
The submission program has probably faked the referer header :(. A thing that I'm sure the submitter hostname is adsl-83-220-128.asm.bellsouth.net. You might want to contact bellsouth for abuse problem, but I doubt if they could do anything about that :(. Maybe you should search Google for links to your site, the maker of the submission script probably has links back to your site.