user agent "Java/1.6.0_03" executing javascript?

Discussion in 'Security' started by timberspine, Feb 20, 2008.

  1. #1
    anyone know what that user agent is? and what it does?

    I was investigating my server's access logs and there's a lot of accesses from this user-agent. Problem is, I have a javascript validated form and I have been getting a lot of blank form submissions lately. I checked the time-stamp of the last blank form submission and it coincided with an access_log entry for that page by Java/1.6.0_03.

    Does anyone know if this user-agent has been known to do this? And if yes, then how do I block access for this user-agent?
     
    timberspine, Feb 20, 2008 IP
  2. Ladadadada

    Ladadadada Peon

    Messages:
    382
    Likes Received:
    36
    Best Answers:
    0
    Trophy Points:
    0
    #2
    That looks like the generic user-agent you get when you use the built in Java classes for accessing HTTP. So it's most probably a custom spam-bot written by the guy using it.

    User-agents are fairly easy to change and often used by both good and bad people so blocking access to a user-agent is usually a bad idea. I would probably add user-agent testing to whatever spam detection you have so that this user-agent's posts go to the moderation queue.
     
    Ladadadada, Feb 21, 2008 IP
  3. timberspine

    timberspine Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    thanks for the reply ... I'm now doing both server-side validation in addition to client-side(javascript) validation, and I think its working.

    thanks again!
     
    timberspine, Feb 22, 2008 IP
  4. trichnosis

    trichnosis Prominent Member

    Messages:
    13,785
    Likes Received:
    333
    Best Answers:
    0
    Trophy Points:
    300
    #4
    i also saw that user agent in server logs.

    it was hitting 3 pages on web site.

    Agent: Java/1.6.0_03
     
    trichnosis, Aug 9, 2008 IP