Forum Moderators: open

Message Too Old, No Replies

What is ATT.net/s/s.dll and why is it spamming my website?

Is it possibly related to a security overhaul I performed?

         

JS_Harris

7:35 am on Dec 8, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I finished a major review of my website security in combination with my work computer yesterday. It was due.

#1 - I did the regular of changing all passwords and security questions of course and added several advanced tracking features, I won't mention which features by name but they are well respected.

#2 - I found a security weakness related to a comment feature "auto complete" script that wasn't properly sanitizing user input, nothing exciting however with no trace of it having been abused.

#3 - I very thoroughly safeguarded my work computer in general, I scanned it with all programs I own and tightened up permissions in general. No 3rd party cookies accepted, a warning on everything running, full warning of any changes to files etc.

I'll admit my computer is now hard to use even while sitting in front of it but it's secure. I have some questions however...

What is ATT.net/s/s.dll and why does analytics say it's bombarding my site as of yesterday? The site has received 388 visits since yesterday as opposed to an average of 2 per day for the past 3 months.

What is 207.net? I've blocked it from setting cookies but it seems to be trying from any link I visit. It doesn't seem legit.

Why are webmasterworld cookies on the default list to be blocked when sanitizing with spybot? The others didn't block this site.

I've googled those of course but didn't find any definitive descriptions.

Thanks

GaryK

6:13 pm on Dec 8, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



What is 207.net? I've blocked it from setting cookies but it seems to be trying from any link I visit. It doesn't seem legit.

From what I could find, 207.net is the same as 2o7.net. When I point my browser at 207.net it gets redirected to the Omniture website.

From their website:

2o7.net is a domain used by Omniture to help provide portions of its Omniture SiteCatalyst and Omniture SearchCenter products. Specifically, this domain is used by Omniture to place cookies, on behalf of its customers, on the computers of visitors to customers’ selected websites.