Go to file

ben a55b080aaa sorting		2020-09-13 19:22:01 +02:00
grep	sorting	2020-09-13 19:22:01 +02:00
json	in dirs	2020-09-13 19:19:56 +02:00
nmap	sorting	2020-09-13 19:22:01 +02:00
README.md	readme fixes	2016-09-20 12:03:36 +02:00
crontab	crontab	2016-09-20 12:49:09 +02:00
grep-to-json.py	json	2020-05-29 17:11:53 +02:00

README.md

Scanning North Korea

Daily port scans of the three North Korean IP networks. Not really sure what to do with this yet...

https://en.wikipedia.org/wiki/Internet_in_North_Korea

A lot of this looks like honey pots.

Networks

Star KP: 175.45.176.0/22
KTPC: 210.52.109.0/24
StarGate: 77.94.35.0/24

Changes

17/04/2015: Added the StarGate network and added -P0 and -oG on all network scans. Also moved scanning time from 06:00 (GMT+9) to 12:00 (GMT+9) in hopes of catching more interesting network clients.

18/04/2015: Removed -P0, it was taking too long.

20/04/2015: I'm probably on a list in NK now.

Interesting ports

Humans like even numbers and I've found that there are several hosts listening for something on ports 10000, 20000, 30000, 50000.