4 ms·
A few days ago, a colleague saw a port/service scan: > User-Agent: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times
by neilv 3y ago
A few days ago, a colleague saw a port/service scan:
> User-Agent: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com
I could maybe see that for license enforcement, or for aggressively alerting users to the vulnerability even in absence of active service contracts.
Could also be someone other than PAN, looking for vulnerable PAN boxes.
- kstrauser 3y agoEven if they honor that exactly as promised, I can't help imagining that email address being an alias for `audit@pan`. "Hey, who owns 12.34.56.78 that wouldn't want us seeing if they had our software running?"
- neilv 3y agoI would totally believe this is driven mainly by enterprise marketing, to get a foot in the occasional door where they haven't managed to otherwise, especially when they have the tool just sitting around. https://www.paloaltonetworks.com/cortex/cortex-xpanse https://www.paloaltonetworks.com/cortex/cortex-xpanse