virtual host confusion

Replies: 0

I’m getting errors of the following kind in my server’s HTTPS error logs:

“Hostname XXXXXXXX:443 provided via SNI and hostname XXX.tld provided via HTTP are different”

Googling around suggests that this is might be an attempted “virtual host confusion” attack. Or did I just misconfigure my server when I set up HTTPS? How to tell. And if it is an attack, can I configure Wordfence to block it? (It is causing my server to go down a few times a day…)

https://security.stackexchange.com/questions/134021/what-kind-of-attack-is-prevented-by-apache2s-error-code-ah02032-hostname-prov