Another host in China which use persistant cookie to track Tor users
s s
silversword07 at gmail.com
Tue Nov 27 08:45:33 UTC 2007
I have observed my url changed automatically
from
http://www.google.cn/
to
http://60.16.34.94/RLOCATION069/?LOC=www.google.cn/
then the host 60.16.34.94 will send this:
HTTP/1.1 302 Moved Temporarily
Allow: GET,POST,HEAD
MIME-Version: 1.0
Server: MA5200 Server 2.0
Set-Cookie: BASSID##=[base64-encoded-timestamp]; Expires=Thu,
09-May-2041 00:00:00 GMT
Location: http://www.google.cn/
Connection: close
Whois query result for 60.16.34.94 from apnic.net :
inetnum: 60.16.0.0 - 60.23.255.255
netname: CNCGROUP-LN
country: CN
descr: CNCGROUP Liaoning province network
admin-c: CH455-AP
tech-c: GZ84-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed at apnic.net 20040416
changed: hm-changed at apnic.net 20060124
source: APNIC
route: 60.16.0.0/13
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse at cnc-noc.net 20060118
source: APNIC
More information about the tor-talk
mailing list