Online security

Get answers and information about our security products.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Censys Port Scanning TalkTalk Home Users

ITTroll
Whizz Kid
Message 1 of 1

I noticed some strange traffic in my logs and identified that it was a company called Censys who were port scanning me on a daily basis. Apparently they scan 3,552 ports across the whole public IP space, which includes home users on domestic ISPs. They are attempting to identify and log any services you might be running. This includes web, databases, IoT, remote access, file-sharing, crypto, and gaming.

 

You can enter your router's WAN IP into this search to see what they have discovered.
https://search.censys.io/

 

The legality of port scanning is a tricky area, especially when crossing international borders. However, the behaviour of Censys is certainly contrary to good etiquette guidance. Remember that in GDPR terms your IP address is personal data.

 

To "opt out" of this intrusive behaviour you need to configure your router/firewall to drop traffic from the following subnets:

 

  • 74.120.14.0/24
  • 162.142.125.0/24
  • 167.248.133.0/24
  • 192.35.168.0/23
0 Likes
0 REPLIES 0