Somebody is counting the AI servers
Twelve POST bodies this week decoded to well-formed handshakes for the Model Context Protocol, the standard AI assistants use to reach tools and data. Ten are generic; two identify their sender as an internet-census scanner and speak a newer revision of the protocol than the other ten. Nothing here runs an AI backend, so every one of them fails. The point is that a scan category which did not exist a year ago is now routine background traffic.
Twelve requests this week spoke a protocol that did not exist a year ago.
Scanners look for shells, admin panels, config files. Familiar things. You learn the shapes and you stop reading them closely.
Decode these and something else appears. They are handshakes for the protocol AI assistants use to reach tools and data on your behalf.
Ten of them are generic. Two announce their sender in the message itself, and the name is not hiding anything: it is a census scanner, counting what it finds across the internet.
Look at the version each one asks for. The two named ones speak a newer revision than the other ten, which means these are separate tools built at separate times, both already in the field.
Nothing here runs an AI backend, so all twelve fail. That is not the point. The point is that this category of scan is already routine.
New protocol, same rule: never expose one without authentication.
#linux#security#infosec#ai#sysadmin
❯ New protocol, same rule: never expose it without authentication.