Hacker News Reader

By "bothering with me" I mean "add my IP to the long list of IPs they are scanning".

By the way, I find it annoying that my logs get filled with this kind of trash. It has the perverse effect of making me long for something like Google Analytics since they rarely if ever bother running a javascript runtime.

View on HN

That long list isn’t curated, it’s every publicly routable IPv4 address. It really does not take long to run some canned probes against 3.7 billion addresses. Making your service IPv6 only tends to cut down on this traffic. You’re anthropomorphizing a script on some botnets.

This isn’t entirely true. Many scanners do preference specific IP ranges such as cloud providers. Cloud IPs receive substantially more scanning traffic than darknet IPs or even random corporate IPs.

IPv6 only? If you have a DNS record for that your are still not making it very difficult for scripts to find you.

> If you have a DNS record for that your are still not making it very difficult for scripts to find you.

If you put your ssh server or something on an uncommon subdomain how will these scripts find it?

If you are on @ or some common name sure, otherwise no.

No one is maintaining a list they just scan all. Scanning every IPv4 there is on a single port takes minutes.

Reply on news.ycombinator.com