I looked through attacks in my access logs

Re:I looked through attacks in my access logs by heywoodlh on Sunday January 28, 2024 @11:59AM (#39167536)

Was looking into Certificate Transparency logs recently. Are there any convenient tools/methods for querying CT logs? i.e. search for domains within a timeframe

Cloudflare’s Merkle Town[0] is useful for getting overviews, but I haven’t found an easy way to query CT logs. ct-woodpecker[1] seems promising, too

[0] https://ct.cloudflare.com/

[1] https://github.com/letsencrypt/ct-woodpecker

[ Parent | on HN ]

Re:I looked through attacks in my access logs by simonw on Sunday January 28, 2024 @12:13PM (#39167688)

Steampipe have a fun SQLite extension that lets you query them via SQL: https://til.simonwillison.net/sqlite/steampipe#user-content-...

It uses an API provided by https://crt.sh/

[ Parent | on HN ]

Re:I looked through attacks in my access logs by high_priest on Sunday January 28, 2024 @01:41PM (#39168521)

Querying crt.sh helped me identify a dev service I was supposed to take down, but forgot about it. Nice alternative use case :D

[ Parent | on HN ]

Re:I looked through attacks in my access logs by j0hnyl on Sunday January 28, 2024 @12:03PM (#39167582)

https://certstream.calidog.io/

[ Parent | on HN ]

Re:I looked through attacks in my access logs by H8crilA on Sunday January 28, 2024 @12:16PM (#39167704)

https://crt.sh/

[ Parent | on HN ]