Scans Target AI Model Context Protocol Servers with Valid Handshakes
Internet-wide scans are now probing Model Context Protocol (MCP) servers and AI assistant config files. Researchers observed 200+ AI‑focused requests from 49 distinct IPs, each sending a valid MCP handshake, indicating attackers are mapping exposed LLM endpoints before trying to hijack them.