Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)B

BonkTheAnnoyed

@ BonkTheAnnoyed @lemmy.blahaj.zone

Posts
26
Comments
151
Joined
7 mo. ago

  • How are people discovering random subdomains on my server?

    Jump

  • The random name is not in the public log. Someone else suggested that earlier. I checked CRT.sh and while my primary domain is there, the random one isn't.

  • How are people discovering random subdomains on my server?

    Jump

  • Previous experiments, yes, I sent a request. The random one, no.

  • How are people discovering random subdomains on my server?

    Jump

  • As expected, it doesn't show up. I had a couple of other subdomains configured before I switched to wildcard, but nothing matches the random one

  • How are people discovering random subdomains on my server?

    Jump

  • Will do!

  • How are people discovering random subdomains on my server?

    Jump

  • Shows up by name in the apache other_hosts...log, so yes

  • How are people discovering random subdomains on my server?

    Jump

  • Nope, but that's a good suggestion. I set this one up brand new for the experiment.

  • How are people discovering random subdomains on my server?

    Jump

  • Mostly from AWS or the like, with occasional Chinese and Russian origins.

    The scans look like requests to various WordPress endpoints, JavaScript files associated with known vulnerabilities etc

  • How are people discovering random subdomains on my server?

    Jump

  • Even with a wildcard cert?

  • How are people discovering random subdomains on my server?

    Jump

  • Yeah, this is interesting, I'll dig more into this direction.

    But the randomly generated subdomain has never seen a DNS registrar.

    I do have *.mydomain.com registered though...hmmm

  • How are people discovering random subdomains on my server?

    Jump

  • Nope

  • How are people discovering random subdomains on my server?

    Jump

  • I don't have any subdomains registered with DNS.

    I attempted dig axfr example.com @ns1.example.com returned zone transfer DENIED

  • How are people discovering random subdomains on my server?

    Jump

  • Yep. They show up in the other_hosts...log

  • How are people discovering random subdomains on my server?

    Jump

  • I don't think so? I have a letsencrypt wildcard cert, and reference that in the relevant .conf

  • ICE shooter has an IMMIGRANT wife... as father comes to his defense

    Jump

  • I have personally known abusers that are so charming and considerate and kind outside of the home that it makes the abused person question reality, and trying to talk about it to people they know feel impossible.

  • 200 million records exposed in massive Pornhub data breach — here’s what we know so far

    Jump

  • Release the pornhub files!

  • F*** You! Co-Creator of Go Language is Rightly Furious Over This Appreciation Email

    Jump

  • R Pike is legend. His videos on concurrent programming remain reference level excellence years after publication. Just a great teacher as well as brilliant theoretical programmer.

  • ICE Shoots Minneapolis Observer in the head

    Jump

  • I'm going start blocking anyone who calls for an armed response. Not only is this a dangerously dumb idea tactically, it would be an invitation for occupation by the national guard, and an absolute win for anyone hoping to break up this country.

    In other words: gtfo with gun glory violence

  • ICE Shoots Minneapolis Observer in the head

    Jump

  • no clear idea of what actually happened yet.

    There is video and eye witness testimony. Pretty freaking clear what happened.

  • ICE Shoots Minneapolis Observer in the head

    Jump

  • and if you choose observing and de-escalation attempts, you are choosing fight.

    This is objectively false. While there is always some risk (more, lately), observers have interrupted kidnappings and chased off ice countless times just in my neighborhood.

    Take a Monarcha training. Get a whistle. Go outside, even just walking around your neighborhood is powerful and helpful.

  • Actually Autistic @lemmy.blahaj.zone
    BonkTheAnnoyed @lemmy.blahaj.zone

    The perfect use for spoons in the "bad spoon" drawer

  • AuDHD @lemmy.world
    BonkTheAnnoyed @lemmy.blahaj.zone

    The perfect use for spoons in the "bad spoon" drawer

  • ADHD @lemmy.world
    BonkTheAnnoyed @lemmy.blahaj.zone

    The perfect use for spoons in the "bad spoon" drawer

  • Showerthoughts @lemmy.world
    BonkTheAnnoyed @lemmy.blahaj.zone

    The perfect use for spoons in the "bad spoon" drawer

  • Selfhosted @lemmy.world
    BonkTheAnnoyed @lemmy.blahaj.zone

    I'm "use NFS forfilesharing" old. what's the current optimal solution for shared drives if I have like 3 linux machines in the house?