Welcome to WebmasterWorld Guest from 54.162.164.247

Forum Moderators: incrediBILL

Message Too Old, No Replies

Is user agent "InetURL:/1.0" a worm?

     
2:21 am on Nov 25, 2005 (gmt 0)

Preferred Member

10+ Year Member

joined:Nov 19, 2002
posts:372
votes: 0


i'm hit by UserAgent: InetURL:/1.0 more and more recently, with various clientip
all they request is something like /upfile.asp, seems trying to do sql injection.
i can search nothing helpful from google except some awstats report pages, some tutorial for delphi to make http agent.
there's a hacker's tool do this, but does it become a worm? or do u have same problem?
2:49 am on Nov 27, 2005 (gmt 0)

Senior Member from CA 

WebmasterWorld Senior Member encyclo is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 31, 2003
posts:9074
votes: 6


InetURL/1.0 appears to be a plugin for a software telephone system, used to get data from a website during a call. Not a worm per se, but difficult to tell why it would be hitting your site.
10:39 am on Nov 27, 2005 (gmt 0)

Preferred Member

10+ Year Member

joined:Nov 19, 2002
posts:372
votes: 0


i'd guess not, it's not a normal usage by human, all file it requested does not exist on my server.
but strange i cannot find anything relatived to worm/virus about InetURL:/1.0 (containing a ":")
the request looks like to:

GET /bbs/diy.asp HTTP/1.1
User-Agent: InetURL:/1.0
Host: $host
Cache-Control: no-cache

some of them are "Mozilla/4.0"

 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members