853
I rented a car, and within hours, my driver's license was for sale (arstechnica.com)
submitted 1 month ago by to c/technology@lemmy.world
197 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 1 month ago (5 children)

I bought a domain, configured the webserver in the next 5m.

As soon as it started taking requests (on a domain that i haven't even announced yet) it got flooded by bots.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 18 points 1 month ago* (1 child)

    Yeah I worked for company with publicly exposed server, the logs were amazing.

    Just bots scanning default ports trying default username and password for services like Microsoft SQL server.

    It’s such a waste of energy really

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 1 month ago

    That's been happening since forever, though. I helped manage proxy servers for my first job in the mid 00's, and those server logs were mostly automated port scans and failed login attempts, even on the newly commissioned servers.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 1 month ago* (last edited 1 month ago)

    Registering SSL is a centralized process with root CAs logging new ones as they come in. Cert transparency logs are a thing, and Google is very involved: https://certificate.transparency.dev/

    Once a bad actor hooks up to that, they just get a realtime stream of places to start port scanning and running WHOIS queries for people who didn't get WHOIS protection. If you used letsencrypt your domains you registered certs for got sent there and anyone who wanted to know about it knew about it before you could tell anyone.

    You can use something like crt.sh to look up domains

  • permalink
  • fedilink
  • source
  • parent