Re: Scanning the Internet for Vulnerabilities

[J. Hellenthal via NANOG]

Wish I still had that email from them where person "possibly not speaking for the company" stated that "they scan the entire internet for vulns and other nefarious things. Where I stated "don't care get your unwanted advertisement scans off my edge, if I want you in the future I know where to find you". And he kept beating around the bush. --   J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. On Jun 20, 2022, at 01:09, Owen DeLong via NANOG <nanog@nanog.org> wrote: shadow server (to the best of my knowledge) only scans sites that have invited them to do so. Owen On Jun 19, 2022, at 10:43 , Forrest Christian (List Account) <li...@packetflux.com> wrote: See shadowserver.net On Sun, Jun 19, 2022, 4:13 AM Ronald F. Guilmette <r...@tristatelogic.com> wrote: I would like to solicit the opinions of network operators on the practice of scanning all of, or large chunks of the internet for known vulnerabilities. In earlier times, this was generally viewed as being distinctly anti-social behavior, but perhaps attitudes have changed relative to earlier eras. I would thus like to know how people feel about it now, in 2022. Regards, rfg P.S.  Just to be clear, I personally have neither any desire nor any intent to undertake such activity myself, nor am I in communiacation with any party or parties that have such an intent or desire.  I cannot however say that I am unaware of any parties that may currently be involved in such activities.