<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">greetings.<div class=""><br class=""></div><div class="">it should be mentioned that shadowserver also notifies those who register as the owners of that address space.<div class="">it’s very useful. (it would be more useful if they calculated diffs and notified about changes/additions.)</div><div class=""><br class=""></div><div class="">my thinking about this sort of thing, in general, is:</div><div class=""><br class=""></div><div class="">- it depends on who’s doing it and why, and what they do with the information</div><div class="">(so what keeps you from doing it for the benefit of your less clueful downstream customers?)</div><div class=""><br class=""></div><div class="">- absolutely nothing prevents bad guys from doing it, so discouraging it fits in the category of</div><div class="">“politeness rules only observed by nice people”.</div><div class=""><br class=""></div><div class="">- it’s polite enough for me for the good guys to identify themselves so you (the target) can worry </div><div class="">less when you notice the activity.</div><div class=""><br class=""></div><div class="">(btw, this reasoning applies also about crawls of content from the wayback machine.)</div><div class=""><br class=""></div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jun 19, 2022, at 10:45 AM, Forrest Christian (List Account) <<a href="mailto:lists@packetflux.com" class="">lists@packetflux.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class="">Correction... <a href="http://shadowserver.org/" class="">shadowserver.org</a><div dir="auto" class=""><br class=""></div><div dir="auto" class="">They scan the entire ipv4 internet daily for select potential vulnerabilities. </div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jun 19, 2022, 11:43 AM Forrest Christian (List Account) <<a href="mailto:lists@packetflux.com" class="">lists@packetflux.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto" class="">See <a href="http://shadowserver.net/" target="_blank" rel="noreferrer" class="">shadowserver.net</a></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jun 19, 2022, 4:13 AM Ronald F. Guilmette <<a href="mailto:rfg@tristatelogic.com" target="_blank" rel="noreferrer" class="">rfg@tristatelogic.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I would like to solicit the opinions of network operators on the practice<br class="">
of scanning all of, or large chunks of the internet for known vulnerabilities.<br class="">
<br class="">
In earlier times, this was generally viewed as being distinctly anti-social<br class="">
behavior, but perhaps attitudes have changed relative to earlier eras.<br class="">
I would thus like to know how people feel about it now, in 2022.<br class="">
<br class="">
<br class="">
Regards,<br class="">
rfg<br class="">
<br class="">
<br class="">
P.S. Just to be clear, I personally have neither any desire nor any intent<br class="">
to undertake such activity myself, nor am I in communiacation with any party<br class="">
or parties that have such an intent or desire. I cannot however say that I<br class="">
am unaware of any parties that may currently be involved in such activities.<br class="">
</blockquote></div>
</blockquote></div>
</div></blockquote></div><br class=""></div></div></body></html>