I have a wildcard dyndns entry. A hostname there maps to a service nobody but me knows about, and to which there are no public references.
Yet, I see requests come in on my reverse proxy setup that try to reach that specific hostname.
The only public reference is the Let's Encrypt Cert that's returned on the IP address.
People are scraping SSL certificates to "discover" hostnames? Woah.
Lars Marowsky-Brée 😷 /
npub1hy…ycarz
2024-02-22 11:38:04
Author Public Key
npub1hyhhpfj6f2yn2fh7fvun988k75gk38zhqpapjchwkrvkczmtk6xqhycarzPublished at
2024-02-22 11:38:04Event JSON
{
"id": "1017d7923fb2339b1e9c3fc676ef00ec4561d46fd520e0b048f92dd721b6d538",
"pubkey": "b92f70a65a4a893526fe4b39329cf6f511689c57007a1962eeb0d96c0b6bb68c",
"created_at": 1708601884,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.online/users/larsmb/statuses/111974933109825445",
"activitypub"
]
],
"content": "I have a wildcard dyndns entry. A hostname there maps to a service nobody but me knows about, and to which there are no public references.\nYet, I see requests come in on my reverse proxy setup that try to reach that specific hostname.\n\nThe only public reference is the Let's Encrypt Cert that's returned on the IP address.\n\nPeople are scraping SSL certificates to \"discover\" hostnames? Woah.",
"sig": "841ca1eafaf60fbd35a1aaa2cd03c555a5dd1fd0ba6dbc50cecbb197235eecd34da8b96ea2a07b16c4e653daf03bb2968094a84a7cdd91358f4916d1a5049cff"
}