From 359cf6b7df66707fd2b1395b930ac55accd5ad98 Mon Sep 17 00:00:00 2001
From: Brian Cunnie <brian.cunnie@gmail.com>
Date: Wed, 18 May 2022 11:44:56 -0700
Subject: [PATCH] Docs for self: who's using ip.sslip.io?

Note: the two biggest users are Cypriot IP addresses:

```
      2 106.52.50.235  <- Tencent
      1 223.71.46.114  <- China Mobile
    157 31.153.14.207  <- Cypriot
    110 62.228.164.123 <- Cypriot
      4 73.189.219.4   <- My home IP
```
`
---
 docs/logs.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/logs.md b/docs/logs.md
index 3720d22..2fde041 100644
--- a/docs/logs.md
+++ b/docs/logs.md
@@ -25,3 +25,13 @@ sed -E 's=.*(\.[^.]+\.[^.]+\.$)=\1=' < hosts.log | tr 'A-Z' 'a-z' | sort | uniq
  # find the most looked-up IP addresses using the above hosts.log
 sort < /tmp/hosts.log | uniq -c | sort -n | tail -50
 ```
+
+```zsh
+ # Who's trying to find out their own IP via ip.sslip.io?
+ sudo journalctl --since yesterday -u sslip.io-dns | \
+   grep -v "nil, SOA" | \
+   grep "TypeTXT ip.sslip.io" | \
+   sed 's/.*TypeTXT ip.sslip.io. ? \["//; s/"\]$//' | \
+   sort | \
+   uniq -c
+```