H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Port Scanning

An adversary uses a combination of techniques to determine the state of the ports on a remote target. Any service or application available for TCP or UDP networking will have a port open for communications over the network.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary uses a combination of techniques to determine the state of the ports on a remote target. Any service or application available for TCP or UDP networking will have a port open for communications over the network.

Labels

attack-patterncapec
36 recorded

Relationships

child-of
to Footprinting
Technique
child-of
from TCP ACK Scan
Technique
child-of
from TCP Connect Scan
Technique
child-of
from TCP FIN Scan
Technique
child-of
from TCP Null Scan
Technique
child-of
from TCP RPC Scan
Technique
child-of
from TCP SYN Scan
Technique
child-of
from TCP Window Scan
Technique
child-of
from TCP Xmas Scan
Technique
child-of
from UDP Scan
Technique
mapped-to
to Network Service Discovery
Technique
related-to
from CVE-2013-0631
Vulnerability
related-to
from CVE-2013-0632
Vulnerability
related-to
from CVE-2013-7331
Vulnerability
related-to
from CVE-2015-4495
Vulnerability
related-to
from CVE-2015-5317
Vulnerability
related-to
from CVE-2016-0162
Vulnerability
related-to
from CVE-2016-2388
Vulnerability
related-to
from CVE-2016-3298
Vulnerability
related-to
from CVE-2016-3351
Vulnerability
related-to
from CVE-2016-4655
Vulnerability
related-to
from CVE-2016-6415
Vulnerability
related-to
from CVE-2017-0022
Vulnerability
related-to
from CVE-2017-0059
Vulnerability
related-to
from CVE-2017-0147
Vulnerability
related-to
from CVE-2017-5521
Vulnerability
related-to
from CVE-2020-3259
Vulnerability
related-to
from CVE-2021-25369
Vulnerability
related-to
from CVE-2021-41277
Vulnerability
related-to
from CVE-2023-21237
Vulnerability
related-to
from CVE-2023-28432
Vulnerability
related-to
from CVE-2024-24919
Vulnerability
related-to
from CVE-2025-31125
Vulnerability
related-to
from CVE-2025-68686
Vulnerability
related-to
from CVE-2026-20133
Vulnerability
related-to
from CVE-2026-20805
Vulnerability
1 external

References

capec
CAPEC-300
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance