[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Another host in China which use persistant cookie to track Tor users



I have observed my url changed automatically
from

    http://www.google.cn/

to

    http://60.16.34.94/RLOCATION069/?LOC=www.google.cn/

then the host 60.16.34.94 will send this:

  HTTP/1.1 302 Moved Temporarily
  Allow: GET,POST,HEAD
  MIME-Version: 1.0
  Server: MA5200 Server 2.0
  Set-Cookie: BASSID##=[base64-encoded-timestamp]; Expires=Thu,
09-May-2041 00:00:00 GMT
  Location: http://www.google.cn/
  Connection: close

Whois query result for 60.16.34.94 from apnic.net :

inetnum:      60.16.0.0 - 60.23.255.255
netname:      CNCGROUP-LN
country:      CN
descr:        CNCGROUP Liaoning province network
admin-c:      CH455-AP
tech-c:       GZ84-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-CNCGROUP-LN
mnt-routes:   MAINT-CNCGROUP-RR
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be updated by APNIC hostmasters.
remarks:      To update this object, please contact APNIC
remarks:      hostmasters and include your organisation's account
remarks:      name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@xxxxxxxxx 20040416
changed:      hm-changed@xxxxxxxxx 20060124
source:       APNIC

route:        60.16.0.0/13
descr:        CNC Group CHINA169 Liaoning Province Network
country:      CN
origin:       AS4837
mnt-by:       MAINT-CNCGROUP-RR
changed:      abuse@xxxxxxxxxxx 20060118
source:       APNIC