homepage Welcome to WebmasterWorld Guest from 54.227.141.230
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
Subscribe to WebmasterWorld
Visit PubCon.com
Home / Forums Index / Code, Content, and Presentation / HTML
Forum Library, Charter, Moderators: incrediBILL

HTML Forum

    
Is user agent "InetURL:/1.0" a worm?
Xuefer




msg:571465
 2:21 am on Nov 25, 2005 (gmt 0)

i'm hit by UserAgent: InetURL:/1.0 more and more recently, with various clientip
all they request is something like /upfile.asp, seems trying to do sql injection.
i can search nothing helpful from google except some awstats report pages, some tutorial for delphi to make http agent.
there's a hacker's tool do this, but does it become a worm? or do u have same problem?

 

encyclo




msg:571466
 2:49 am on Nov 27, 2005 (gmt 0)

InetURL/1.0 appears to be a plugin for a software telephone system, used to get data from a website during a call. Not a worm per se, but difficult to tell why it would be hitting your site.

Xuefer




msg:571467
 10:39 am on Nov 27, 2005 (gmt 0)

i'd guess not, it's not a normal usage by human, all file it requested does not exist on my server.
but strange i cannot find anything relatived to worm/virus about InetURL:/1.0 (containing a ":")
the request looks like to:

GET /bbs/diy.asp HTTP/1.1
User-Agent: InetURL:/1.0
Host: $host
Cache-Control: no-cache

some of them are "Mozilla/4.0"

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / HTML
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About
© Webmaster World 1996-2014 all rights reserved