AWS securityhub: Add list of scanned TCP ports for Network Scanning
Summary
Added a new section specifying the well-known TCP ports scanned during network vulnerability assessments.
Security assessment
Documents security-relevant scanning behavior, helping users understand exposure points for attacks like brute-force or service exploitation.
Evidence
+ 21, 22, 23, 25, 53, 80, 110, 143, 443, 445, 1433, 3306, 3389, 5432,
Diff
diff --git a/securityhub/latest/userguide/securityhub-v2-network-scanning.md b/securityhub/latest/userguide/securityhub-v2-network-scanning.md index 4c370999d..dd412a93d 100644 --- a//securityhub/latest/userguide/securityhub-v2-network-scanning.md +++ b//securityhub/latest/userguide/securityhub-v2-network-scanning.md @@ -7 +7 @@ -Supported resource typesEnable Network ScanningHow Network Scanning worksNetwork Scanning findingsScan evidenceExcluding resources from scanningScan trafficMulti-cloud supportRegion availabilityDisable Network Scanning +Supported resource typesEnable Network ScanningHow Network Scanning worksNetwork Scanning findingsScan evidenceExcluding resources from scanningSupported portsScan trafficMulti-cloud supportRegion availabilityDisable Network Scanning @@ -207,0 +208,8 @@ When you add the exclusion tag, Network Scanning stops future scans and closes a +## Supported ports + +Network Scanning scans the following well-known TCP ports on eligible resources. + + + 21, 22, 23, 25, 53, 80, 110, 143, 443, 445, 1433, 3306, 3389, 5432, + 5900, 6379, 8080, 8443, 9200, 27017 +