Comment on How are people discovering random subdomains on my server?

Bombastic@sopuli.xyz ⁨3⁩ ⁨days⁩ ago

• BonkTheAnnoyed@lemmy.blahaj.zone ⁨3⁩ ⁨days⁩ ago

  I mean, it could be… I’ll try it with a 128 char base 52 name and see what happens

  source

  • Keelhaul@sh.itjust.works ⁨3⁩ ⁨days⁩ ago

    Have you also tried making a subdomain and not making any requests to it yourself? So no browser access or other DNS resolution requests for the new subdomain. That should rule out some of the other possible causes suggested in the other comments.

    source

    • Morphit@feddit.uk ⁨2⁩ ⁨days⁩ ago

      Dang, it could be the upstream DNS server passing along client queries. Maybe the ISP?

      In that case not even curl wouldn’t be safe unless you could ensure all queries only resolve on your gear. Either use a host file entry or local DNS server.

      source