Data Science @ Rapid7

The heatmap below shows the “services exposure” for a given region. The rows of the heatmap are the number of ports exposed (starting with “1” at the bottom). Each column is a country and the color of each square is the percentage of devices within country that have that many ports exposed (red→blue).

The heatmap is ordered left-to-right from countries with least open port/node volume to those with most open port/node volume. Hover over a square to see what’s inside.

There are some interesting outliers to hunt for, such as:

• The Falkland Islands which has ~83% of their systems/devices (1,814) exposing 14 ports
• French Polynesia which has ~28.3% of their systems/devices (1,700) exposing 30 ports
• Gibraltar which has ~31% of their systems/devices (1,724) exposing 23 ports
• Qatar which has ~21% of their systems/devices (8,619) exposing 25 ports
• The unusual “line” across at port count 24 looks like we may have caught some Dionaea honeypots and/or port-forwarding firewalls/routers