keisatsu@infosec.pubtoSelfhosted@lemmy.world•Confused about bot scanning my domainEnglish
421·
9 months agoProbably not. It’s most likely automated scanning and the subdomains seem common enough to be included in wordlists. Another possibility is that the subdomains have leaked somehow, do you use LetsEncrypt? If so, the existence of your subdomains is public knowledge and can easily be picked up by bots.
As a security consultant who tests web applications on the regular: LOL