An internet-wide port scan in one 7MB GIF, by HD Moore

29 points by deeqkah 13 years ago | 10 comments

sltkr 13 years ago |

Actually, that GIF file seems to be 11 MB, not 7 MB! But here's the same thing in 340 KB (courtesy of Gifsicle): http://i.imgur.com/ozZhyu4.gif

jcr 13 years ago |

If you haven't seen it yet, HD Moore did a great presentation on scanning at DerbyCon 2012. Video is avaiilable here:

vacri 13 years ago |

Would have been more interesting without the crazy space-filling-curve-esque pattern. Harder to read this way.

theatrus2 13 years ago |

The number of services which shouldn't normally be open is always concerning. Like port 3306.

niggler 13 years ago | |

How do you know they aren't just honeypot mysql instances?

jacquesm 13 years ago | | |

Quantity.

namuol 13 years ago |

Does anyone want to explain how to read this? I've been scratching my head for a while...

snarfy 13 years ago | |

I believe it's a heat map of the first octet of the ip address that responded.

taproot 13 years ago | | |

Heh and here I was eyes glazed over by the pretty colors.

abhijit_pal 13 years ago |

Awesome work!