MEDIUM: Open QOTD Report

DESCRIPTION LAST UPDATED: 2023-12-18

DEFAULT SEVERITY LEVEL: MEDIUM

This report identifies hosts that have the Quote of the Day (QOTD) service running and accessible on the Internet.

These services have the potential to be used in amplification attacks by criminals that wish to perform denial of service attacks. The service is tested by sending a UDP packet containing a single carriage return to UDP port 17.

You can track latest QOTD exposure on our Dashboard.

Severity levels are described here.

For more information on our scanning efforts, check out our Internet scanning summary page..

Filenames: scan_qotd

Fields

  • timestamp
    Time that the IP was probed in UTC+0
  • severity
    Severity level
  • ip
    The IP address of the device in question
  • protocol
    Protocol that the DNS response came on (usually UDP)
  • port
    Port that the CharGen response came from
  • hostname
    Reverse DNS name of the device in question
  • tag
    Will always be qotd
  • quote
    The quote that was sent in response
  • asn
    ASN of where the device in question resides
  • geo
    Country where the device in question resides
  • region
    State / Province / Administrative region where the device in question resides
  • city
    City in which the device in question resides
  • naics
    North American Industry Classification System Code
  • hostname_source
    Hostname source
  • sector
    Sector the IP belongs to
  • response_size
    Response size in bytes
  • amplification
    Amplification factor (This amplification is is based solely on the payload size sent and payload size received)

Sample

"timestamp","severity","ip","protocol","port","hostname","tag","quote","asn","geo","region","city","naics","hostname_source","sector","response_size","amplification"
"2010-02-10 00:00:00",medium,192.168.0.1,udp,17,node01.example.com,qotd,"_In Heaven an angel is nobody in particular._ George Bernard Shaw (1856-1950)?",64512,ZZ,Region,City,0,,,79,79.00
"2010-02-10 00:00:01",medium,192.168.0.2,udp,17,node02.example.com,qotd,"_Man can climb to the highest summits, but he cannot dwell there long._?? George Bernard Shaw (1856-1950)?",64512,ZZ,Region,City,0,,,107,107.00
"2010-02-10 00:00:02",medium,192.168.0.3,udp,17,node03.example.com,qotd,"_When a stupid man is doing something he is ashamed of, he always declares?? that it is his duty._ George Bernard Shaw (1856-1950)?",64512,ZZ,Region,City,0,,,132,132.00

Our 132 Report Types

« Back to Network Reporting