Detections
Analytics
Active Scanning: Scanning IP Blocks
Description
Adversaries may scan victim IP blocks to gather information that can be used during targeting. Public IP addresses may be allocated to organizations by block, or a range of sequential addresses.
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|---|---|---|---|---|---|
| Tenable Attack Surface Management | Internet | None | HTTP, DNS | Open Ports |
Attack Path Technique Details
Framework: MITRE ATT&CK
Family: Reconnaissance
Technique: Active Scanning
Sub-Technique: Scanning IP Blocks
Platform: PRE
Products Required: Tenable Attack Surface Management
Tenable Release Date: 2024 Q3