XSF Discussion - 2022-05-30

`warn No 'to' on stream header from scanner@censys.io means we can't offer any features` <- anybody ever see this jid before?

Sounds like they do automated attack surface analysis and offer their services to the feds – should I be worried? 🤔️

adasd

Many people regularly scan the entire ipv4 internet, takes minutes, I wouldn't worry about it

..really? how many minutes

might try it

qy: under 5 minutes, have fun https://github.com/robertdavidgraham/masscan

damn, guess my home internet's not powerful enough to pull that off

moparisthebest, that's not the same as protocol specific scanning, tho. I'm used to SEO shit scanning me, but nothing advertising automated security scans.

phryk: plus most to all XMPP servers are here so anyone can easily scan them all https://www.shodan.io/

moparisthebest, have you seen any security companies not paid for that by you scan *your* servers?

I don't look, everyone scans everything all the time like I said

i can't seem to get it to scan just one port and not 0-65535

seems dodgy

it did just break my router though so I think i'll stop

awoo

qy: -p5222 ?

no effect

neither does `ports=` in config ✏

Strange

ikr