Technique
technique:internet_wide_scanning
Also: full scan of the internet, internet scanning, mass scanning
Scanning public IP addresses, checking whether they are alive, and testing the top 100 ports.
Scanning public IP addresses, checking whether they are alive, and testing the top 100 ports.
“This new mission was to use those vulnerable devices to do a full scan of the internet”
“test to see if the top 100 ports were open on it”
Scanning the internet for systems exposing Remote Desktop on port 3389.
“This server was being used to mass-scan the internet”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Carna Botnet | Explicit | 13 |
| incoming | USES | Roman Seleznev | Explicit | 32 |
Carna Botnet USES internet-wide scanning
The Carna Botnet was used to scan the entire internet, including IP addresses and the top 100 ports.
Explicit Confidence 99% · Jack Rhysider EP 13 Details
“This new mission was to use those vulnerable devices to do a full scan of the internet; not just checking for Telnet but pinging every IP and checking the top 100 ports.”
Roman Seleznev USES internet-wide scanning
Roman's server was used to mass-scan the internet for computers with Remote Desktop exposed.
Explicit Confidence 98% · Jack Rhysider EP 32 Details
“This server was being used to mass-scan the internet”