3 ms·
Is there a database of this so people can check if their devices are compromised?
by khc 10y ago
Is there a database of this so people can check if their devices are compromised?
- justinsaccount 10y agoI could publish it somewhere.. The problem is people just don't care. I dumped the ASN owners for a bunch of sources, the top 3 are: 15664 BR TELEFNICA BRASIL S.A, BR 15215 VN VNPT-AS-VN VNPT Corp, VN 15112 CN CHINANET-BACKBONE No.31,Jin-rong Street, CN You think TELEFNICA BRASIL gives a shit that they have 15k+ compromised customers? I'd say if you can telnet to your wan IP and get a login prompt, you have a shitty router that exposes telnet to the world and you're probably compromised :-)
- ansible 10y agoYou think TELEFNICA BRASIL gives a shit that they have 15k+ compromised customers? Shouldn't they? It eats a lot of their outbound bandwidth. Even if they have peering agreements that they don't have to pay for, there's still the cost of the equipment and their internal network bandwidth to consider.
- rajangdavis 10y agoshodan.io
- skrowl 10y agoSome kind of IoT realtime block list like we have for spammers would be nice
- justinsaccount 10y agoIt's ultimately not very useful for that sort of thing.. 326,160 addresses in the past 38 minutes. What would you do with this information?
- VikingCoder 10y agoChrome, Firefox, IE, could all check your IP against that list, and inform you, "Looks like you have an unsecured device which is attacking the internet, and slowing down your connection. Here's a site that can help you fix the problem..."
- justinsaccount 10y agoI suppose, but that would require you to install the add-on that does that, or for it to be included by default.. both of which seem unlikely. Having google or facebook check REMOTE_ADDR for every client would work though, but most people wouldn't understand what the notification means. Plus, on a network that isn't using nat you'd never get the alert since the IoT device itself would never be REMOTE_ADDR.
- nacnud 10y agoTrue, but it still would be a step in the right direction for home users.