[dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure

Duane Wessels wessels at packet-pushers.com
Tue Dec 4 17:17:27 UTC 2007



Also, FYI, here's the top 30 user agent counts from my logs for yesterday.
Requests from user agents with "Linux" totalled only 965.

522750 | Mozilla/4.0 (compatible; MSIE 6.0; Win32)
246828 | Windows-Update-Agent
130619 | Mozilla/4.0 (compatible; MSIE 7.0; Win32)
  64146 | Microsoft-CryptoAPI/5.131.2600.2180
  41359 | WinHttp-Autoproxy-Service/5.1
  35310 | NSPlayer/11.0.5721.5145
  12107 | Kaspersky Proxy-Server detection agent
  11332 | Updaterpre 1.3.005
  10779 | Mozilla/4.0 (compatible; MSIE 5.5; Win32)
   8981 | -
   7597 | Mozilla/4.0 (compatible; MSIE 5.0; Win32)
   3068 | Microsoft SUS Client/2.0
   2822 | NSPlayer/11.0.5358.4827
   2649 | RTNotify
   2594 | NSPlayer/10.00.00.3802
   2538 | CHttpProxyDetect
   2274 | NSPlayer/9.00.00.3250
   1882 | Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
   1668 | Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
   1490 | System.Net.AutoWebProxyScriptEngine/2.0.50727.312
   1322 | Microsoft-WebDAV-MiniRedir/6.0.6000
    994 | WinHttpWPADProxySelector
    913 | NSPlayer/11.0.6000.6324
    687 | Mozilla/4.0 (compatible; MSIE 6.0b; Win32)
    595 | Konfabulator!
    560 | Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.10) Gecko/20071115 Firefox/2.0.0.10
    530 | Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.10) Gecko/20071115 Firefox/2.0.0.10
    478 | Updater1.3.002
    447 | Microsoft BITS/6.6
    445 | NSPlayer/9.00.00.2980




More information about the dns-operations mailing list