from Hacker News

Open IPP Report – Exposed Printer Devices on the Internet

by exanimo_sai on 6/24/20, 12:16 AM with 10 comments

• by yumraj on 6/25/20, 1:30 AM

  Curious, if they are doing a scan, can/should they not, in public interest, also print a page notifying, if possible in the local language else a page with multiple languages, that the printer should be secured.

• by blakesterz on 6/24/20, 7:01 PM

  "We scan by sending an IPP Get-Printer-Attributes request to TCP port 631. We started regular scanning of all 4 billion routable IPv4 addresses on the 5th of June 2020 and added Open IPP reporting as part of our daily public benefit remediation network reports on the 8th of June 2020. Our IPP scans uncover around 80,000 open devices (printers) per day."

  That number is lower than I thought it might be. For some reason South Korea has about 36k of that 80k. I don't see any guesses as to why on the report page.

• by nix23 on 6/24/20, 10:50 AM

  When i found a open printer (by accident) i printed a nice letter on it that they should put the printer behind a firewall or at least into a private network.

• by l0b0 on 6/24/20, 8:57 PM

  Is there a Have I Been Pwned-like service for such reports? Scanning their own network for such services would be beyond most users.

• by beamatronic on 6/24/20, 7:33 PM

  Do these get opened by UPnP?