Skipped website:443 from target list as found unresponsive 30 times after using v3.2.7

[davidvazquezpf]

Currently using latest version (3.2.8) and since v.3.2.6 we are experiencing the following issue:
Nuclei is showing: [INF] Skipped ourwebsite:443 from target list as found unresponsive 30 times

We have not changed anything in the current process, it is a scan that is carried out periodically (weekly) for discovering web vulnerabilities in a regular basis after new releases. Running it with version 3.2.6 does not show this problem.

The command we are executing is:
nuclei -u https://www.ourwebsite.com -H User-Agent:scanning_tool --include-tags iot, misc, fuzz, xss, sqli, rce, ssrf, config, cve -fuzz

Any idea about what can be wrong or how to fix it?

Thank you.

[tarunKoyalwar]

@davidvazquezpf , we have revamped maxhosterror in #5148 , if you still see max host error and unresponsive host it is most likely a real problem with target

as of now max-host-error is triggered on following errors

nuclei/pkg/protocols/common/hosterrorscache/hosterrorscache.go

Lines 177 to 179 in 4ae0b39

	var reCheckError = regexp.MustCompile(`(no address found for host|could not resolve host|connection refused|connection reset by peer|could not connect to any address found for host|timeout awaiting response headers)`)

and all of them are critical in nature

for debugging purposes please follow below steps and share what is the actual error returned by server which might be causing this issue

step 1) run nuclei with -elog errors.jsonl flag

step 2) rank / dedupe and count error using

cat errors.jsonl | jq -r '.error' |  sort | uniq -c

[davidvazquezpf]

Thank you very much for the support. Seems to be a problem with the target, we will investigate.

[mattjeff1234]

hello i have also encountered the same issue .i have uploaded the errors.jsonl file for further investigation .please resolve the issue.
errors.jsonl.txt

[ZerkerEOD]

I am having the same issue and I have tried it on four or five different sites from our clients. Is there any way to ignore the errors?