← Back to Explore
T1595.001
Scanning IP Blocks
Adversaries may scan victim IP blocks to gather information that can be used during targeting. Public IP addresses may be allocated to organizations by block, or a range of sequential addresses. Adversaries may scan IP blocks in order to [Gather Victim Network Information](https://attack.mitre.org/techniques/T1590), such as which IP addresses are actively in use as well as more detailed information about hosts assigned these addresses. Scans may range from simple pings (ICMP requests and respon...
PRE
6
Detections
2
Sources
2
Threat Actors
BY SOURCE
5elastic1splunk_escu
PROCEDURES (4)
Service3 detections
Auto-extracted: 3 detections for service
Unusual1 detections
Auto-extracted: 1 detections for unusual
Unusual1 detections
Auto-extracted: 1 detections for unusual
Network Connection Monitoring1 detections
Auto-extracted: 1 detections for network connection monitoring