Just today I'm migrating some of my webpages to a new server. After a couple hours the services was ready, I set up a hosts file with my domain example.com pointing to the server address, went to my browser and navigated to the domain and all worked ok. Just before I made the new server public (by changing the DNS) I noticed two requests in the nginx log comming from different IPs to my own:
By curiosity I went to that address in my browser and both says that they are from bots that scans services (tequilaboomboom and shadowserver). OK, but... how did they know the domain? The server is public and people can go to the IP address, but my nginx log is specific for my domain example.com. I only have React extension on my W10 Chrome browser. How did they catch my request to know what site to scan? Am I being spied on? Is my machine compromised? Is my network compromised?