BufferOver — per-IP self-ID via bufferover.run
by shop owners for shop owners.
PTR *.scan.bufferover.run (self-ID): 28 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. diverse Linode (AS63949).
internet-wide TLS/certificate and DNS scanner (BufferOver / dns.bufferover.run, US). Not an SEO tool. The scan IPs are self-identifying: reverse DNS *.scan.bufferover.run. Found in the CINS cross-check and completed via neighbor-range scan — each IP reverse-confirmed (28). Part of our PARC Security feed.
bufferover.json — view feed bufferover.run →
Verification — every IP individually
The reverse PTR *.scan.bufferover.run can only be set by the IP operator — a non-forgeable ownership hint. Seeded from the actively scanning CINS IPs, completed via reverse scan of the surrounding /24s; each IP confirmed individually:
28 IPs → all PTR bufferover.run
Reverse-only (forward not consistently checkable, like Shodan/Infrawatch). AbuseIPDB partly lists these at score 100 — they are benign research scanners nonetheless.