Show HN: Explore Random Web Servers (opens in new tab)

(randomsite.lhackworth.com)

39 pointsdrankula37y ago15 comments

15 comments

12 comments · 7 top-level

I wish they would add a 400 checker.

I'll start working on one now. edit: Done. It'll take a while, but soon the database will be pruned. It will remove 404s and sites that don't respond in 0.25 seconds. edit2: It will remove status 500 as well. Let me know if there are any other broad groups that should be pruned. edit3: pruning 400 now too

tyingq7y ago

Pruning the default cloudflare message about not using a direct IP might be helpful.

Like this one: http://104.18.4.92

1 more reply

nickthemagicman7y ago

You sir are the man!

bharrison7y ago· 1 in thread

Unsettling stuff for a Saturday morning; In two attempts I was connected to the login pages of two types of systems I use and administer regularly.

I'm aware that this is indicative of bad security practices and not some vulnerability in those systems, but that didn't make it any more comfortable to see their familiar UI elements exposed in all their nakedness.

octosphere7y ago

> exposed in all their nakedness

In fairness, some of the better designed servers redirect to a domain. For example, one of the IPs I stumbled redirected to this weird portal (where the links point to the parent domain)

https://www.cjb.net

tyingq7y ago· 1 in thread

Neat idea, but I get mostly certificate errors, bare Apache errors, timeouts, basic auth prompts, etc. Some kind of filter might make it more interesting.

drankula3OP7y ago

I agree completely that further filtering would improve the site a lot. That kind of filtering would require a lot more than a basic port scanner. I'll probably do it someday.

It's also really fun to find web servers on nonstandard ports, but I worry about the site then being abused to find compromised servers.

eps7y ago

That's like StumbleUpon for 404, 403 and 500 pages :)

wataruspeedo7y ago

Looks like most of the internet is broken.

xyzal7y ago

Found some home routers with default credentials. Will people never learn?

tannerwj7y ago

I've got Google.com twice. I wonder how many IPs would redirect me there.

j / k navigate · click thread line to collapse

15 comments

12 comments · 7 top-level

nickthemagicman7y ago· 3 in thread

I wish they would add a 400 checker.

drankula3OP7y ago

tyingq7y ago

Pruning the default cloudflare message about not using a direct IP might be helpful.

Like this one: http://104.18.4.92

1 more reply

nickthemagicman7y ago

You sir are the man!

bharrison7y ago· 1 in thread

Unsettling stuff for a Saturday morning; In two attempts I was connected to the login pages of two types of systems I use and administer regularly.

octosphere7y ago

> exposed in all their nakedness

In fairness, some of the better designed servers redirect to a domain. For example, one of the IPs I stumbled redirected to this weird portal (where the links point to the parent domain)

https://www.cjb.net

tyingq7y ago· 1 in thread

Neat idea, but I get mostly certificate errors, bare Apache errors, timeouts, basic auth prompts, etc. Some kind of filter might make it more interesting.

drankula3OP7y ago

I agree completely that further filtering would improve the site a lot. That kind of filtering would require a lot more than a basic port scanner. I'll probably do it someday.

It's also really fun to find web servers on nonstandard ports, but I worry about the site then being abused to find compromised servers.

eps7y ago

That's like StumbleUpon for 404, 403 and 500 pages :)

wataruspeedo7y ago

Looks like most of the internet is broken.

xyzal7y ago

Found some home routers with default credentials. Will people never learn?

tannerwj7y ago

I've got Google.com twice. I wonder how many IPs would redirect me there.

j / k navigate · click thread line to collapse