jdev - 2024-11-24

  1. dwd

    Morning. I'm getting this, several times a second, from my very-dev Metre: [2024-11-24 11:20:03.046] [XmlStream serial=[1] INBOUND type=[S2S]] [debug] Parsing stream open [2024-11-24 11:20:03.046] [XmlStream serial=[1] INBOUND type=[S2S]] [info] Parse error; could be TLS handshake [2024-11-24 11:20:03.046] [XmlStream serial=[1] INBOUND type=[S2S]] [error] Not first read or already TLS; giving up [2024-11-24 11:20:03.046] [XmlStream serial=[1] INBOUND type=[S2S]] [error] Raising error: [expected <] [2024-11-24 11:20:03.046] [XmlStream serial=[1] INBOUND type=[S2S]] [debug] Got [27]: MGLNDD_217.155.137.60_5269

  2. dwd

    Translated, that's something connecting to my port 5269, and sending the string MGLNDD_{my ipaddress}_{my port}. Anyone seen this before?

  3. Zash

    Internet search suggests it's some scanner.

  4. dwd

    Yes, indeed. Weird that I don't see it on my production instance.

  5. Zash

    I see it too, but only once on 5222 and another on 5269