The scan that you saw is part of an effort by The Shadowserver Foundation to identify hosts/services that are unnecessarily exposed on the Internet, misconfigured, vulnerable or otherwise abusable. Some of our scans are also population scans to measure accessible services. We mean no harm, nor do we exploit any vulnerabilities. The goal is to reduce the Internet’s exposed attack surface by reporting our findings to you or the responsible (national) CERT. We hope to improve the Internet’s cybersecurity resilience. You can subscribe to our service and get all the information we collect about your network for free.
You can read more on our scanning efforts in our blog “The Scannings Will Continue Until The Internet Improves”.