10 comments

[ 1.6 ms ] story [ 30.0 ms ] thread
The number of services which shouldn't normally be open is always concerning. Like port 3306.
How do you know they aren't just honeypot mysql instances?
Would have been more interesting without the crazy space-filling-curve-esque pattern. Harder to read this way.
Does anyone want to explain how to read this? I've been scratching my head for a while...
I believe it's a heat map of the first octet of the ip address that responded.
Heh and here I was eyes glazed over by the pretty colors.