Re: Possible Hijacking from Globix
This WebDNA talk-list message is from 2002
It keeps the original formatting.
numero = 42735
interpreted = N
texte = Put a [hideif [ipaddress]=theiripaddress] all the good stuff [/HideIf]in the page!-- Stuart Tremain idfk web developments - AustraliaOn Wednesday, 21 August 2002, Michael Davis
wrote: >A page on my server is being hit at a rate of about 20 hits/hr from >the same two IP addresses registered to a company in GB called >Scrollock Computers. They seem to be owned by Globix >(globix.com). I see that Globix does proxy services. I'm >wondering if this is what is hitting my page. I haven't seen a >reply from them to a message I sent inquiring, but it may be that >it's too late there. The page being hit is a products details page >for a few Beatles CD's we carry. I've done some statistics: >1. Always the same browser UA. Mozilla/4.0 (compatible; MSIE 5.0; >Windows NT; DigExt) >2. Only 1 out of 100 hits includes a cookie that I set on the page >(return visitor) >3. All hits from two IP addresses: 213.219.017.220, 213.219.058.019 >4. Javascript Code seems to be stripped out of what the final >viewer sees. > (I assume this because I put a javascript in the page that would >preload an image. > I added some variables to the image request so that I could >possibly see what url > the person behind the proxy was visiting and what UA they were >using. So far, no > hits to that image.) >5. Always the same [cart] string. So they are proxying a page that >is useless as an actual e-commerce application. >6. After three days of this, that cart file is still empty. This >leads me to believe that they may also be stripping out the click >to order button on the page. > >Globix looks pretty big from their web site. Has anyone else had >an experience with them like this? > > > >Mike > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list . >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to >Web Archive of this list is at: http://search.smithmicro.com/ >------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Put a [hideif [ipaddress]=theiripaddress] all the good stuff [/HideIf]in the page!-- Stuart Tremain idfk web developments - AustraliaOn Wednesday, 21 August 2002, Michael Davis wrote: >A page on my server is being hit at a rate of about 20 hits/hr from >the same two IP addresses registered to a company in GB called >Scrollock Computers. They seem to be owned by Globix >(globix.com). I see that Globix does proxy services. I'm >wondering if this is what is hitting my page. I haven't seen a >reply from them to a message I sent inquiring, but it may be that >it's too late there. The page being hit is a products details page >for a few Beatles CD's we carry. I've done some statistics: >1. Always the same browser UA. Mozilla/4.0 (compatible; MSIE 5.0; >Windows NT; DigExt) >2. Only 1 out of 100 hits includes a cookie that I set on the page >(return visitor) >3. All hits from two IP addresses: 213.219.017.220, 213.219.058.019 >4. Javascript Code seems to be stripped out of what the final >viewer sees. > (I assume this because I put a javascript in the page that would >preload an image. > I added some variables to the image request so that I could >possibly see what url > the person behind the proxy was visiting and what UA they were >using. So far, no > hits to that image.) >5. Always the same [cart] string. So they are proxying a page that >is useless as an actual e-commerce application. >6. After three days of this, that cart file is still empty. This >leads me to believe that they may also be stripping out the click >to order button on the page. > >Globix looks pretty big from their web site. Has anyone else had >an experience with them like this? > > > >Mike > > >------------------------------------------------------------- >This message is sent to you because you are subscribed to > the mailing list . >To unsubscribe, E-mail to: >To switch to the DIGEST mode, E-mail to >Web Archive of this list is at: http://search.smithmicro.com/ >------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Stuart Tremain
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
[WebDNA] products.db (2013)
many-to-one problem (1998)
Hidden or Forbidden? (1998)
Fields/Forms Processing (1998)
notification solutions (1997)
[WebDNA] site becomes unavailable and WebCatalog warnings (2017)
[WebDNA] Some code inside a large loops fail ... but why? (2010)
OUTSIDE LINKS TO SHOW SHOPPING CART????????? (1998)
Kill the webcat process (2000)
WebCat2b15MacPlugin - [protect] (1997)
Clearing orders and database help! (1997)
Browser (agent) stats... (2004)
RE: WebCat name recognition (was MacFinder -- a new WebDNAweb site) (1998)
and more [shipcost].... (2001)
This list needs a digest: rant, rave... (1997)
autosensing lanague selection (1997)
How To question on setting up downloads (1997)
WebCatalog Mac 2.1b3 (1997)
What happens to an include when a template gets encrypted? (2005)
WebCat2b15MacPlugIn - [authenticate] not [protect] (1997)