BOPM Scanner false positive
Christophe Meron <[email protected]> Thu, 12 Jan 2006 20:03:46 +0100
| Newsgroups | gmane.network.irc.bopm |
|---|---|
| Message-ID | <[email protected]> |
Heya, I've noticed that you dont provide support for IRC but as this is more a report than a support query, i'm writing here, hopping it's the write place :) We've noticed that there's a false positive with the open HTTP proxy detection: Client exiting: whitehat ([email protected]) [User has been banned from EuropNet (Open proxy found on your host. Please visit www.blitzed.org/proxy?ip=194.146.227.87 for more information.)] Open http proxy on a shell provider seems a little strange (possible but strange :) to me so i checked: jan 12 01:16:02 BOPM OPEN PROXY -> [email protected] 194.146.227.87:8080 (HTTP) [default] But that port port seems to be binded to a private ircd, not an open http proxy chris@pyramid ~ $ nc -v 194.146.227.87 8080 shell2.akseo.fr [194.146.227.87] 8080 (http-alt) open :irc.rezochat.com NOTICE AUTH :*** Looking up your hostname... :irc.rezochat.com NOTICE AUTH :*** Found your hostname CONNECT 1.2.3.4:6667 HTTP/1.0 :irc.rezochat.com 451 CONNECT :You have not registered USER a b c d NICK pwet :irc.rezochat.com NOTICE pwet :*** If you are having problems connecting due to ping timeouts, please type /quote pong 56536A04 or /raw pong 56536A04 now. PING :56536A04 [...] Hopping this may help improving this great tool, Regards, Christophe Meron (i just noticed we seems to not contribute our positive scans to bopm, i'll try to make the person in charge of it to configure that shortly) -- I have great faith in fools -- self confidence my friends call it. -- Edgar Allan Poe