Drawing from one week of telemetry across 67 domains and over 4.16 million requests, this technical deep dive dissects what internet background radiation actually looks like on the front lines. We explore how modern scanners hide behind browser user agents, why AI coding configurations like /.cursor/mcp.json have overtaken .env files as high-priority recon targets, and how a newsletter consolidation exposed automated form abuse alongside our own missed CAN-SPAM postal address requirement. Finally, we break down why 10% of probing traffic originated from Spamhaus DROP criminal netblocks and demonstrate how unconditional edge blocking stops low-and-slow adversaries before their first payload lands.
- Internet Background Radiation: What Actually Hits a Small Security Estate in a Week: https://cisomarketplace.com/blog/internet-background-radiation-what-hits-a-small-estate
- One in Ten: 10% of the Addresses Probing Us Came From Criminal Networks: https://cisomarketplace.com/blog/one-in-ten-ips-criminal-networks-spamhaus-drop
- Your AI Coding Tools Are the New .env: https://cisomarketplace.com/blog/ai-coding-tool-configs-are-the-new-env
- Bots in the Inbox: Newsletter Signup Abuse and CAN-SPAM: https://cisomarketplace.com/blog/bots-in-the-inbox-newsletter-signup-abuse-can-spam
Disclosure program / bug bounty
No comments yet. Be the first to say something!