Comment on How are people discovering random subdomains on my server?
Illecors@lemmy.cafe 1 month agoIs this at a webserver level?
Comment on How are people discovering random subdomains on my server?
Illecors@lemmy.cafe 1 month agoIs this at a webserver level?
mic_check_one_two@lemmy.dbzer0.com 1 month ago
It can be both server and DNS provider. For instance, Cloudflare allows you to set rules for what traffic is allowed. And you can set it to automatically drop traffic for everything except your specific subdomains. I also have mine set to ban a IP after 5 failed subdomain attempts. That alone will do a lot of heavy lifting, because it ensures your server is only getting hit with the requests that have already figured out a working subdomain.
Personally, I see a lot of hacking attempts aimed at my main
www.subdomain, for Wordpress. Luckily, I don’t run Wordpress. But the bots are 100% out there, just casually scanning for Wordpress vulnerabilities.