Hacker News Reader

Comment by fireeyed | Hacker News Reader

Update: After eliminating all candidates - browser extensions, vscode, npm packages, I finally disconnected my pihole power supply and these GET calls stopped. The macpro is not using the pihole, is it possible the pihole is compromised is calling all ip ranges with port 80 ? I configured my flask app to run on port 0.0.0.0

View on HN

Maybe Pihole blocking updates/version checks for flask app? Many of the calls seem to be 404 errors, they may be getting through when PiHole or DNS server is offline?

Any reason your not using 127.0.0.1 IP for local host?

Doesn't seem to be pihole calls. Pihole was running on a Raspberrypi connected to the main router. I am thinking a malware somehow got on the RPi is calling anything on the network with a port 80 with the calls I mentioned above.

Oh ok, I thought that snippet was from an error log hence the reason the calls were not being displayed once the blocker was powered off. It is my understanding that the RPI takes over DNS service when powered on instead of the router, in effect forcing the router into a switch, but if the Pi is offline the router reverts back to being the gateway and probably would allow the GET calls through.

I haven't used PiHole but it looks like a practical use for one of my PIs currently collecting dust. Other than this issue how have You found it? Does it do a good job of blocking adds?

You may be right

74.64.250.142 is listed on S.O.R.B.S, my tablet battery is dying so can't check them all.

But You might want to search the other IPs on

https://whatismyipaddress.com/

Reply on news.ycombinator.com