I am helping a friend run their online game and looking out for cheaters and the logs sometime come in blank for their user agents.
Like this.
2019-03-15 15:36:12 143.176.107.114 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
2019-03-15 15:35:38 143.176.107.114
2019-03-15 15:29:31 143.176.107.114
2019-03-15 15:25:57 143.176.107.114 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
I have not seen it on any other accounts. Any guesses ?
Related
Actually google page speed insights are not using these user agents
Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/27.0.1453 Mobile Safari/537.36
FOR DESKTOP
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/27.0.1453 Safari/537.36
but how can i get the new user agents used by these service?
Looking deeper into the logs of my server and printing the http header user-agent i found the User Agent from Google Page Speed Insight are the below two instances
{ "pattern": "Chrome-Lighthouse",
"instances": [
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3694.0 Safari/537.36 Chrome-Lighthouse",
"Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3694.0 Mobile Safari/537.36 Chrome-Lighthouse"
]}
i'm using these object to validate with a regex if the user agent is a bot
regex = RegExp("Chrome-Lighthouse","ig")
regex.test("Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3694.0 Safari/537.36 Chrome-Lighthouse")
Many requests for my web page include "Edge/12" in user agent strings. None contain "Edge/13".
The Microsoft blog said that token string should indicate the version of Edge.
... yet my web page which gets 40K+ visits a day seems to have no visits from Edge 13 - they're all from Edge 12.
Do Microsoft's docs on Edge's user agent match what Edge 13's user agent actually is?
Well ... this source claims that most Edge users are on 13, but how does it know that?
Yes, the user agent string is different. It even contains the build number. This is the pattern for the Edge Desktop UA String:
Mozilla/5.0 (Windows NT 10.0; <64-bit tags>) AppleWebKit/<WebKit Rev> (KHTML, like Gecko) Chrome/<Chrome Rev> Safari/<WebKit Rev> Edge/<EdgeHTML Rev>.<Windows Build>
For my system this is:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586
An older Edge 12 UA string was:
Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10136
You can find the Microsoft documentation on this topic here: https://msdn.microsoft.com/en-us/library/hh869301(v=vs.85).aspx
I guess your user agent detection code does not detect the Edge version correctly. This proofs the point that one should avoid relying on the UA string at all.
I work on Edge at Microsoft.
Yes, they differ. Edge 13 has Edge/13 in the UA.
For whatever reason, your traffic has not update their install of Windows.
What are the differences between IE10 on Windows 7 and Windows 8 (Desktop mode and/or Metro mode).
Things like:
rendering differences (including hardware acceleration, DX filters and media queries)
JS differences (eg touch events, window resizing)
plugin differences (do they sandbox Flash differently?)
quirks (compatibility) mode differnces
Not so much things like:
the ability to "pin" sites to the start screen in Windows 8 and other Windows 8 integration
the user agent (Windows NT 6.2 on Windows 8, Windows NT 6.1 on Windows 7)
Microsoft seem to sum it up pretty well here: Internet Explorer 10 on Windows 7
What do MDDR means in a user agent string?
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; MDDR; InfoPath.1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.4; OfficeLivePatch.1.3)
Most puzzling, this question has been asked since a while ;)
My hunch based on http://www.zytrax.com/tech/web/msie-history.html and http://www.vistaheads.com/forums/microsoft-public-internetexplorer-general/460619-what-do-mddr-stands-user-agent-string.html and http://dell.msn.com/?pc=MDDC is that MDDR is a variant of MDDC and basically it would be an OEM modified version (by Dell) of IE.
Not too sure, but some links that might be of help:
http://sillydog.org/forum/sdt_15762.php : User forum that displays user agent strings. There's a member of the Bing outreach team (bingnate) who has that in his user agent strings. You might be able to ask him.
http://user-agent-string.info User agent analyzer.
I encountered this user-agent almost 10 years after this question is asked and this is what I found.
The description of the MDDR / MDDRJS fragment is Dell.
Source: https://developers.whatismybrowser.com/learn/unknown-user-agent-fragments/
Wikipedia has this listed this abbreviation as Mobile DDR - http://en.wikipedia.org/wiki/MDDR
I have two vista Business machines. I have IE 7 installed on both. On my first machine (Computer1) if I go to this site (http://www.quirksmode.org/js/detect.html), it says I am using "Explorer 6 on Windows". If I use Computer2 with Vista Business and IE7, it says I am using "Explorer 7 on Windows". Here is a screen capture. The same version of IE is on both machines. Anyone have a solution?
Computer1: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET CLR 3.0.30618; MS-RTC LM 8; .NET CLR 1.1.4322) Rick Kierner (11 minutes ago)
Computer2: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2; .NET CLR 3.5.21022) Rick Kierner (10 minutes ago)
There seems to be some garbage in the user agent of Computer1 that repeats the Mozilla/4.0 (compatible...) information with MSIE 6.0 information (and mismatched closing brackets). That said, I ran your user agent through the script provided on the page you linked to and it came back as Explorer 7, so I'm not sure why it is failing on the page itself.
Regardless, check your Registry for additional User Agent information that could be removed at [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\5.0\User Agent] (yes, it resides under '5.0' even if you have Internet Explorer 7). Note that this is the location in Windows XP, I'm assuming it is the same in Windows Vista.
Can you post the User Agent of both machines? (you can go to some site that displays the user agent, i.e. this one, at the very bottom).
I assume it's a bug on the Quirksmode site in conjunction with the user gaent.
Are you using the same version of IE7 on both machines?
If the versions are different then it is possible that the script is not recognising one version for some reason and is just defaulting to IE6 as a lowest common denominator.
It is possible that one of the machines may have a version of IE which isn't exactly following the rules to the letter and the script is having a hard time handling it.
Check the registry keys
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
and
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\5.0\User Agent\Post Platform]
Some pieces of software will add additional values here, which is fine, unless you specify a user agent string. In that case, most browser detects will fire off and detect the last value they find.
Typically, these values will either be in a "User Agent" key or "Post Platform" key.
I found the registry entry:
HKEY_USERS\S-1-5-21-817507923-1393677948-3603797094-1205\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
It had the
"Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.1; SV1)"
value. After removing that, my browser is recognized as IE 7
This is just a guess, but the first string you posted explicitly has "MSIE 6.0" in the query string. If the site is lazy and doesn't properly parse the string, that could override the "MSIE 7.0" in the string earlier on, and give you a false result.
I found the IE6 registry key. Am I able to delete this without causing problems on my PC??
HKEY_USERS\S-1-5-21-117609710-1647877149-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
where I found the following:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
I have IE7 installed and am able to use most facebook etc. items. It was pointed out to me that I seem to have both versions active and could experience problems if I don't fix this.
I don't want to remove the registry key if that could cause a whole new set of problems!
thanks