Comment on How to secure Jellyfin hosted over the internet?
sludge@lemmy.ml 3 weeks agoAnd since i don’t post my valid urls anywhere no web-scraper can find them
You would, ah… be surprised. My website isn’t published anywhere and I currently have 4 active decisions and over 300 alerts from crowdsec.
gagootron@feddit.org 3 weeks ago
Of course i get a bunch of scanners hitting ports 80 and 443. But if they don’t use the correct domain they all end up on an Nginx server hosting a static error page. Not much they can do there
SpaceCadet@feddit.nl 3 weeks ago
This is how I found out Google harvests the URLs I visit through Chrome.
Got google bots trying to crawl deep links into a domain that I hadn’t published anywhere.
zod000@lemmy.ml 3 weeks ago
This is true, and is why I annoying have to keep robots.txt on my unpublished domains. Google does honor them for the most part, for now.
SpaceCadet@feddit.nl 3 weeks ago
That reminds me … another annoying thing Google did was list my private jellyfin instance as a “deceptive site”
A common issue it seems.