An internet-wide port scan in one 7MB GIF, by HD Moore
digitaloffense.net
An internet-wide port scan in one 7MB GIF, by HD Moore
1–10 of 11 posts
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#2If you haven't seen it yet, HD Moore did a great presentation on
scanning at DerbyCon 2012. Video is avaiilable here:
http://www.irongeek.com/i.php?page=videos/derbycon2/1-1-2-hd...
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#3The number of services which shouldn't normally be open is always concerning. Like port 3306.
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#4The number of services which shouldn't normally be open is always concerning. Like port 3306.
How do you know they aren't just honeypot mysql instances?
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#5Would have been more interesting without the crazy space-filling-curve-esque pattern. Harder to read this way.
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#6Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#7Does anyone want to explain how to read this? I've been scratching my head for a while...
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#8Does anyone want to explain how to read this? I've been scratching my head for a while...
I believe it's a heat map of the first octet of the ip address that responded.
Re: An internet-wide port scan in one 7MB GIF, by HD Moore
#9Actually, that GIF file seems to be 11 MB, not 7 MB! But here's the same thing in 340 KB (courtesy of Gifsicle): http://i.imgur.com/ozZhyu4.gif
