An internet-wide port scan in one 7MB GIF, by HD Mooredigitaloffense.net 29 pointsdeeqkah13 years ago10 commentsSaveHideCopy link On HNComments−sltkr13yActually, that GIF file seems to be 11 MB, not 7 MB! But here's the same thing in 340 KB (courtesy of Gifsicle): http://i.imgur.com/ozZhyu4.gif−jcr13yIf you haven't seen it yet, HD Moore did a great presentation on scanning at DerbyCon 2012. Video is avaiilable here:http://www.irongeek.com/i.php?page=videos/derbycon2/1-1-2-hd...−vacri13yWould have been more interesting without the crazy space-filling-curve-esque pattern. Harder to read this way.−theatrus213yThe number of services which shouldn't normally be open is always concerning. Like port 3306.−niggler13yHow do you know they aren't just honeypot mysql instances?−jacquesm13yQuantity.−namuol13yDoes anyone want to explain how to read this? I've been scratching my head for a while...−snarfy13yI believe it's a heat map of the first octet of the ip address that responded.−taproot13yHeh and here I was eyes glazed over by the pretty colors.−abhijit_pal13yAwesome work!
Comments
Actually, that GIF file seems to be 11 MB, not 7 MB! But here's the same thing in 340 KB (courtesy of Gifsicle): http://i.imgur.com/ozZhyu4.gif
If you haven't seen it yet, HD Moore did a great presentation on scanning at DerbyCon 2012. Video is avaiilable here:
http://www.irongeek.com/i.php?page=videos/derbycon2/1-1-2-hd...
Would have been more interesting without the crazy space-filling-curve-esque pattern. Harder to read this way.
The number of services which shouldn't normally be open is always concerning. Like port 3306.
How do you know they aren't just honeypot mysql instances?
Quantity.
Does anyone want to explain how to read this? I've been scratching my head for a while...
I believe it's a heat map of the first octet of the ip address that responded.
Heh and here I was eyes glazed over by the pretty colors.
Awesome work!