The Shadowserver Foundation mDNS Scanning Project
OVERVIEW
MDNS.SHADOWSERVER.ORG TRAFFIC
Date Range
Date Range
Date Range
LINKS TO WEBSITE
WHAT DOES MDNS.SHADOWSERVER.ORG LOOK LIKE?
MDNS.SHADOWSERVER.ORG SERVER
SERVER SOFTWARE
We identified that this website is implementing the Apache/2.4.18 (Ubuntu) server.SITE TITLE
The Shadowserver Foundation mDNS Scanning ProjectDESCRIPTION
Open mDNS Scanning Project. If you are looking at this page, then more than likely, you noticed a scan coming from this server across your network andor poking at Multicast DNS mDNS. The Shadowserver Foundation is currently undertaking a project to search for publicly accessible devices that have the mDNS service accessible and answering queries. The goal of this project is to identify devices with an openly accessible mDNS service and report them back to the network owners for remediation. To be remo.PARSED CONTENT
The website mdns.shadowserver.org states the following, "If you are looking at this page, then more than likely, you noticed a scan coming from this server across your network andor poking at Multicast DNS mDNS." I analyzed that the website said " The Shadowserver Foundation is currently undertaking a project to search for publicly accessible devices that have the mDNS service accessible and answering queries." They also stated " The goal of this project is to identify devices with an openly accessible mDNS service and report them back to the network owners for remediation."ANALYZE OTHER WEBSITES
Open Memcached Key-Value Store Scanning Project. This service does not support authentication which means any entity that can access the Memcached instance can have complete control over the key-value store. Memcached servers that we have found to be accessible have been incorporated into our reports. And are being reported on a daily basis.
Authentication is available for MongoDB, however, we have found that in the majority of installations authentication is not enabled. Without authentication, the MongoDB instance can be completely accessed by anyone. And are being reported on a daily basis.
Open MS-SQL Server Resolution Service Scanning Project. Servers that are configured this way have been incorporated into our reports. And are being reported on a daily basis.
Information on these vulnerable devices has been incorporated into our reports. And are being reported on a daily basis. For hints on decoding the response.
The Shadowserver Foundation is currently undertaking a project to search for publicly accessible devices that have NetBIOS running and answering Name Resolution queries. The goal of this project is to identify openly accessible NetBIOS services and report them back to the network owners for remediation.