Skip to content
This repository has been archived by the owner on Apr 3, 2018. It is now read-only.

IP detected as INVALID #83

Closed
funilrys opened this issue Jul 25, 2017 · 15 comments
Closed

IP detected as INVALID #83

funilrys opened this issue Jul 25, 2017 · 15 comments
Assignees
@funilrys
Labels
bug
Projects
Issues [Discovered]
Milestone
Discovered Issues

Comments

@funilrys
Copy link
Owner

The-Big-List-of-Hacked-Malware-Web-Sites of @mitchellkrogza started to have INVALID output for IP.

This is produced by funceble and so after the introduction of IP adresses into its domain.txt.

Time to integrate IP a bit better than now !!
@funilrys funilrys added the bug label Jul 25, 2017
@funilrys funilrys added this to the Discovered Issues milestone Jul 25, 2017
@funilrys funilrys self-assigned this Jul 25, 2017
@funilrys funilrys added this to Todo in Issues [Discovered] Jul 25, 2017
@mitchellkrogza
Copy link

mitchellkrogza commented Jul 25, 2017 via email

@funilrys
Copy link
Owner Author

This is what is coming soon 👍
screenshot from 2017-07-25 20-57-19

@funilrys
Copy link
Owner Author

To explain the unknown, if i don't set a timeout for the command which get the http code, the script take too much time ...

@xxcriticxx
Copy link

whats code 000?

@mitchellkrogza
Copy link

mitchellkrogza commented Jul 26, 2017 •
edited

@xxcriticxx @funilrys been wondering that myself so I tested it.

curl -I https://007angels.com curl: (7) Failed to connect to 007angels.com port 443: Connection refused

curl -I https://007angels.com curl: (52) Empty reply from server

curl https://007angels.com
<html>
<head>
<meta name="robots" content="noarchive" />
<meta name="googlebot" content="nosnippet" />
</head>
<body>
<div align=center>
<h3>Error. Page cannot be displayed. Please contact your service provider for more details.  (16)</h3>
</div>
</body>
</html>

But if you visit 007angels.com in a browser it redirects you to ww5.007angels.com

So they are doing something on their Nginx server to prevent people digging for server information ???

@funilrys
Copy link
Owner Author

funilrys commented Jul 26, 2017 •
edited

I can confirm that with my dev version of funceble and there are many cases like that ...

There are several hypotheses.

  1. We are considered as bot
  2. They blocked all nonbrowser call
  3. The domain name is for sale but is still connected to a server
  4. They drop all connection to a specific port
  5. ... let's complete this list 😹

screenshot from 2017-07-26 11-16-23

@funilrys
Copy link
Owner Author

To complete the list ...
https://stackoverflow.com/a/9391270/5308363

@funilrys funilrys moved this from Todo to In Progress in Issues [Discovered] Jul 26, 2017
funilrys added a commit that referenced this issue Jul 26, 2017
@funilrys
Improvement of #71 + Fix #83
bcc7d0c
@mitchellkrogza
Copy link

Very interesting

@funilrys funilrys moved this from In Progress to Done in Issues [Discovered] Jul 27, 2017
@mitchellkrogza
Copy link

Latest funceble working 100% detecting IP's now. See - https://github.com/mitchellkrogza/The-Big-List-of-Hacked-Malware-Web-Sites 👍 well done @funilrys funceble just keeps getting better and better. 💯

@funilrys
Copy link
Owner Author

funilrys commented Aug 14, 2017 •
edited

Thanks @mitchellkrogza 👍 😸 The version dev-1.4.0+xxx is even better 😉

Gonna take a look at that later 👍

@mitchellkrogza
Copy link

Awesome @funilrys looking forward to seeing it when you done with your changes.

@funilrys funilrys moved this from Done to In Progress in Issues [Discovered] Aug 17, 2017
@funilrys funilrys mentioned this issue Aug 17, 2017
Closed
@funilrys
Copy link
Owner Author

default

funilrys added a commit that referenced this issue Aug 17, 2017
@funilrys
Refactoring of errorHandle() + Fix #83
d89d190
@funilrys
Copy link
Owner Author

Thanks @mitchellkrogza 😄

yeah

@funilrys funilrys moved this from In Progress to Done in Issues [Discovered] Aug 17, 2017
@mitchellkrogza
Copy link

Pulling now to my Ubuntu box and going to run it against those plaint text lists I created.

@funilrys
Copy link
Owner Author

switch to dev branch before 😉

I always leave the (upstream not local) dev branch as useable so that it's easier to get feedback about what I'm developing for the next release 😸

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@funilrys funilrys

Labels
bug
Projects
Issues [Discovered]
Done
Milestone
Discovered Issues
Development

No branches or pull requests
3 participants
@mitchellkrogza @funilrys @xxcriticxx