Ravi Sir's Cyber Security Cards › Revision Cards
How Name-Based Virtual Hosting Works
How Name-Based Virtual Hosting Works Name-based virtual hosting = many websites on one server and one IP. The browser sends a Host header with the name. The server picks the matching site. Bots and scanners usually connect by IP, not by name. If the default site is your real app, every scanner sees
Read card text
What this card says
What it is
Name-based virtual hosting = many websites on one server and one IP.
The browser sends a Host header with the name. The server picks the matching site.
Why it matters for security
Bots and scanners usually connect by IP, not by name.
If the default site is your real app, every scanner sees it.
Safe setup
Make a catch-all default that returns nothing, like Nginx return 444;.
It hides real sites from IP scans and blocks Host-header tricks.
Learn more in the lesson: 13.1 How Name-Based Virtual Hosting Works