News for hackers. Stuff that matters.

A comment on Ask HN: How did internet discover my subdomain?. Parent comment

Re:Ask HN: How did internet discover my subdomain? by melevittfl on Friday March 07, 2025 @06:22AM (#43289275)
But there's no evidence in the OP's post that they have, in fact, discovered the domain. The only thing posted is that there is a GET request to a listening web server.

The OP and all the people talking about certificates are making the same assumption. Namely that the scanning company discovered the DNS name for the server and tried to connect. When, if fact, they simply iterate through IP address blocks and make get requests to any listening web servers they find.

[ Parent | on HN ]
Re:Ask HN: How did internet discover my subdomain? by p0w3n3d on Friday March 07, 2025 @10:16AM (#43290815)
OP states that the domain was discovered
[ Parent | on HN ]
Re:Ask HN: How did internet discover my subdomain? by crazygringo on Friday March 07, 2025 @10:34AM (#43290981)
No they didn't. They said "How did the internet find my subdomain?" They're assuming the internet found their subdomain. They don't provide any evidence that happened, just that they found their IP address.
[ Parent | on HN ]
Re:Ask HN: How did internet discover my subdomain? by denysvitali on Saturday March 08, 2025 @03:03AM (#43298440)
I really doubt CloudFlare gives them an IPv4 and they can see all the logs for said IPv4
[ Parent | on HN ]