Forum Moderators: open
I do, and don't miss them either.
Would it be safe to NUKE it?
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36",
"sec-ch-ua-platform": "\"Linux\"","sec-fetch-dest": "document"
&
"sec-fetch-dest": "image"
function lightOneUp(q,p) {
var mW = 0, mH = 0;
var r = Math.floor(Math.random() * p);
d = document.documentElement;
b = document.body;
if( typeof( window.innerWidth ) == 'number' ) {//Non-IE
mW = window.innerWidth;
mH = window.innerHeight;
} else if( d && ( d.clientWidth || d.clientHeight ) ) {//IE 6+ in 'standards compliant mode'
mW = d.clientWidth;
mH = d.clientHeight;
} else if( b && ( b.clientWidth || b.clientHeight ) ) {//IE 4 compatible
mW = b.clientWidth;
mH = b.clientHeight;
}
document.write('<img border="0" height="2" alt="" src="/img.jpg?u=' +mW+ '.' +mH+ '.' +q+ '.' +p+'">');
}
<script>
lightOneUp(x,y);
</script>
x and y are passed as extra params to track session first and subsequent parameters via Application Session that it tracked by Server Code
"headers": {
"sec-ch-ua-mobile": "?0",
"Accept-Language": "en-US,en;q=0.9",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-ch-ua": "\"Not;A=Brand\";v=\"99\", \"Chromium\", \"Google Chrome\"",
"host": "www.example.com",
"priority": "u=0, i",
"sec-fetch-user": "?1",
"connection": "close",
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"Accept-Encoding": "gzip, deflate, br, zstd",
"X-ORIGINAL-URL": "/",
"upgrade-insecure-requests": "1",
"sec-ch-ua-platform": "\"Linux\"",
"X-REQUEST-URI-STAB": "/",
"content-length": "0",
"sec-fetch-dest": "document"
}
How many actual "human" ipsBuried somewhere upthread is the detail that the final /11 within 43/8, i.e. 43.224-255, may include human ISPs. And even if your target audience is not likely to include {Asian country of your choice}, you probably don't want to exclude Australia and New Zealand. Heck, they might be buying something from a US-based business to ship to their relatives in the US.
Look at FireFox, Chrome, Edge. <== Request HeadersOut of millions of Sec-blahblah headers, I found only a hundred or so containing \" (that is, escaped quotation mark in addition to the usual quotation used in this header) or ^, so I'm confident calling them bogus. But on the other hand they are so rare, it's not currently worth blocking on those grounds alone.
<system.webServer>
<security>
<ipSecurity allowUnlisted="true" denyAction="AbortRequest">
<!-- NoMo 43.0.0.0/8-->
<add ipAddress="43.0.0.0" subnetMask="255.0.0.0"/> <!-- 43.0.0.0/8 43.0.0.0 - 43.255.255.255 - as Margaret LeAnn Rimes Cibrian mentioned on Wiki: You Light Up My Life, Sittin on Top of the World.. -->
</ipSecurity>
</security>
</system.webServer>
