Security Incidents mailing list archives
Re: foreign HTTP requests
From: ddoc () MIA CZ (Daniel Docekal)
Date: Fri, 16 Jun 2000 22:19:45 +0200
They send you cookies too ..... Maybe a problem for privacy, no ?
I have made report to secure () microsoft com (repeated), now they have finally reacted to it, but i am afrtaid they take it as something obscure and think that i am insane or bugging them for nothing. For me it IS security (privacy) problem with possible serious implications. It is not that big problem for our webs since we have changes 404 scripts to just log these request in different database.
Any idea on how this can happen ?
Well, ideas are always present - imho it is bug in O/S resolver which keeps somehow and sometime sending request to "previous" visited web site - what bugs me is that this is NOT particular to some browser nor some platform. Since we are getings THOUSANDS of these request a day (we run web with some million of hits a day) i have tried to look for pattern in UserAgent - and there is none. This bug is in Netscape/microsoft as well as in Unix/Windows.... See current list (data from yesterday to today, first column is number of entries, 2nd is useragent) 1264 Mozilla/4.0 (compatible; MSIE 4.01; Windows 98) 953 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt) 344 HttpAgent 1.0 (unix) 157 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98) 148 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; CT2) 132 Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; DigExt) 88 Mozilla/4.0 (compatible; MSIE 4.01; Windows 95) 65 63 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; CT1) 51 Mozilla/3.0 (compatible; NetMind-Minder/4.01) 38 eCatch/3.0 34 Mozilla/2.0 (compatible; NEWT ActiveX; Win32) 33 Mozilla/4.0 (compatible; BorderManager 3.0) 29 Mozilla/3.0 (Win95; I; HTTPClient 1.0) 27 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; {World Online}) 26 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98) 25 Mozilla/4.5 [en] (Win95; I) 25 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; Computer CD) 23 Mozilla/4.72 [en] (Win98; I) 21 Mozilla/4.0 (compatible; MSIE 4.01; MSIECrawler; Windows 95) 19 Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt) 18 Mozilla/3.0 (compatible; NetMind-Minder/4.0) 17 Mozilla/4.0 (compatible; MSIE 5.01; Windows 95) 15 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; VOLIE_5_CZ_VOLNY) 14 Mozilla/4.08 [en] (WinNT; I ;Nav) 14 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; Seznam) 13 Mozilla/2.0 (compatible; MSIE 4.0; Windows 98) 13 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; EuroTel) 12 Mozilla/4.0 (compatible; MSIE 5.01; MSN 2.5; Windows 98) 11 Teleport Pro/1.29 10 Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; DigExt) 10 ExtractorPro 10 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; VOLIE_5_CZ_VOLNY; DigExt) 9 Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; DigExt; Seznam) 9 Mozilla/2.0 (compatible; PlanetWeb/1.011 Golden; SEGA Saturn; TV; 640,480) 8 Mozilla/4.05 [en] (X11; I; OSF1 V4.0 alpha) 8 Mozilla/4.61 [en] (Win95; I) 7 Mozilla/4.6 [en] (Win98; I) 7 Mozilla/4.04 [en] (WinNT; U) 6 Mozilla/4.0 (compatible; MSIE 4.01; Windows NT) 6 Mozilla/4.51 [cs] (Win98; U) 5 Mozilla/4.51 [en] (Win95; I) 5 Mozilla/3.01 (Compatible; Links2Go Similarity Engine) 5 Mozilla/3.0 (Win16; I) 5 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; Freei Networks) 5 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; Superonline) 5 Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.5; Windows 98; CNETHomeBuild03171999) 5 Mozilla/2.0 compatible; Check&Get 1.2 (Windows NT) 4 Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0) 4 Mozilla/3.Mozilla/2.01 (Win95; I) 4 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; ZDNetSL; DigExt) 4 Mozilla/3.01 (compatible; netbox/3.5 R88; Linux 2.2) 3 Mozilla/4.0 (compatible; MSIE 5.0; AOL 4.0; Windows 98; DigExt) 3 Googlebot/2.0 beta (googlebot(at)googlebot.com) 3 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; Windows User Magazine) 3 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; Seznam) 3 Mozilla/2.0 (compatible; MSIE 3.01; Windows 95) 3 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; Highway 194 Internet Vertriebs Ges.m.b.H) 2 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; KITV4 Wanadoo) 2 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; AltaVista 1.01.01; DigExt) 2 Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) 2 Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; DigExt) 2 Mozilla/4.5 [en] (Win95; I)(compatible; Powermarks/3.0; Windows 95/NT4) 2 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; Seznam) 2 ia_archiver 2 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; VOLIE_5_CZ_VOLNY_I2000) 2 Mozilla/1.1N (Windows; I; 16bit) 2 Mozilla/1.22 (compatible; MSIE 2.0; Windows 95) 2 Mozilla/4.51 [it] (Win98; I) 2 Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; DigExt; VOLIE_5_CZ_VOLNY) 2 Offline Explorer/1.3 2 Mozilla/4.05 [cz] (Win95; I) 2 Mozilla/4.7 [en] (Win98; I) 2 Mozilla/4.7 [en] (Win95; I) 2 Mozilla/2.0 (compatible; MSIE 5.0; Windows 98) 2 Mozilla/2.0 (compatible; HTTPClient 1.0; Windows 95) 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; MSNCOM) 1 Mozilla/4.51 [en] (X11; I; SunOS 5.7 sun4u) 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; sunrise4) 1 Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; WISH) 1 Mozilla/4.06 [en] (Win98; I) 1 Mozilla/4.0 [en] (Win95; I) 1 Mozilla/4.06 [en] (Direct Hit Grabber) 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; CZCOM) 1 Mozilla/3.04 (Win95; I) 1 Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC) 1 Mozilla/4.6 [de] (WinNT; I) 1 Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90) 1 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; CT1; MSIECrawler) 1 DaviesBot 1.7 (Licensed to WholeWeb.net, Inc.) 1 Mozilla/4.05 [en] (Win16; I) 1 Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; {World Online}; NET M@NAGER V2.0 - WWW.VINN.COM.AU) 1 Mozilla/1.1 (compatible; MSPIE 2.0; Windows CE) 1 Mozilla/4.51 [en] (Win98; I) 1 Mozilla/3.01 (Win16; I) 1 Mozilla/4.0 (compatible; MSIE 5.0; Win32) 1 Mozilla/2.0 (compatible; MSIE 3.02; Windows 3.1) 1 Mozilla/4.04 [en] (WinNT; I ;Nav) 1 Mozilla/4.51 [en] (X11; I; Linux 2.2.13 i686; Nav) 1 Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.5; Windows 98) 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; OptusIE5) 1 Mozilla/4.04 [en] (Win95; U) 1 Tango/c1.2 c1.0 Win32 Alis/6 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; QXW03306; QXW03302; DigExt; QXW0331t) 1 Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; {World Online}; DigExt) Daniel
Current thread:
- Re: foreign HTTP requests Daniel Dočekal (Jun 15)
- Re: foreign HTTP requests Nicolas GREGOIRE (Jun 16)
- <Possible follow-ups>
- Re: foreign HTTP requests Daniel Docekal (Jun 16)
- Re: foreign HTTP requests Nicolas GREGOIRE (Jun 20)
- Re: foreign HTTP requests Sevo Stille (Jun 20)
- Re: foreign HTTP requests Daniel Dočekal (Jun 20)
- Re: foreign HTTP requests Bjorn Djupvik (Jun 20)
- Re: foreign HTTP requests Nicolas GREGOIRE (Jun 22)
- Re: foreign HTTP requests Vladimir Ivaschenko (Jun 22)
- Re: foreign HTTP requests Bjorn Djupvik (Jun 23)
- 8.2.2-P5 stops answering queries? Daniel Ramirez (Jun 22)
- Re: 8.2.2-P5 stops answering queries? Kovacs Andrei (Jun 23)
- Re: 8.2.2-P5 stops answering queries? jose (Jun 23)
- Re: foreign HTTP requests Nicolas GREGOIRE (Jun 22)