thewayne: (Default)
The Wayne ([personal profile] thewayne) wrote2006-09-26 11:03 am

Has anyone ever seen an IP address or domain like this one?

http://3527160334:82/httpsiginin.ebay.com/reg.php

I've seen this a lot in phishing emails, which is where this one came from, and I don't know what to make of it. It doesn't have a domain, it isn't an IP address, and it isn't the format for an IPv6 address.

Does anyone recognize this?

[identity profile] chirssly.livejournal.com 2006-09-26 05:22 pm (UTC)(link)
It doesn't work in any of my web browsers so I'm confused too. I do have one guess: maybe it's an IP number and not an IP address? Is there some browser or exploit that will let you hit sites by using a decimal representation of an IP address? (i.e. A.B.C.D becomes (A*256^3) + (B * 256^2) + (C * 256) + D )

[identity profile] thewayne.livejournal.com 2006-09-26 06:02 pm (UTC)(link)
You know, I never thought of it as a decimal representation of an IP address. It doesn't resolve on my browser either when opened directly from the email. With the :82 port assignment and the subsequent slash delimiter, I just assumed that it would resolve. I really should find who teaches the advanced levels of computer networking at school and see if they have a clue. I need to talk to them anyway, I'm thinking about offering to teach SQL Server next Fall.