Who’s Scanning Your Network? (A: Everyone)
Summary: Researchers at the University of Michigan's ZMap Team run scans.io, a public repository of continuous Internet-wide scan results covering common ports such as 443, 21, and 25. In a Heartbleed notification experiment, the team scanned the IPv4 address space, used data from 200,000 vulnerable hosts tied to 4,600 abuse contacts, and ran an A/B test that raised patching by 50 percent in the notified group.
Bottom line: The team found that exclusion requests came mostly from small to mid-sized businesses that discovered the scans only while troubleshooting other problems, not from large corporations watching their logs - so the organizations least able to interpret a scan are the ones most likely to be surprised by one.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026