robertdavidgraham/masscan on Hacker News

Agree re: no need for heap allocation - for others: I recommend reading thru whole masscan source ( https://github.com/robertdavidgraham/masscan ), it's a pleasure btw - iirc rather few/sparse malloc()s which are part of regular I/O…

comment by wfn · 2025-10-13 · in Love C, hate C: Web framework memory problems

…at his code (for a port scanner that can scan the entire Internet in 5 minutes, whew) on GitHub: https://github.com/robertdavidgraham/masscan

comment by nostrademons · 2025-09-24 · in That Secret Service SIM farm story is bogus

…battleship game, but scanning the whole internet on the other hand only take a few minutes[1] [1]: https://github.com/robertdavidgraham/masscan

comment by augusto-moura · 2025-08-10 · in How I use Tailscale

…requests to open web ports. [1] Turns out you can port-scan the entire internet in under 5 minutes: https://github.com/robertdavidgraham/masscan

comment by parliament32 · 2025-03-07 · in Ask HN: How did the internet discover my subdomain?

…a lot. It's a nice dream of "owning" the attackers but it doesn't have a real security value. [1] https://github.com/robertdavidgraham/masscan

comment by morbicer · 2024-12-18 · in Scanners Beware: Welcome to the network from hell

banner checking to a large degree. e.g. https://github.com/robertdavidgraham/masscan

comment by rolph · 2024-12-08 · in Ask HN: How do you find and consume content online?

A lot of these seem to use zmap ( https://github.com/zmap/zmap ) or masscan ( https://github.com/robertdavidgraham/masscan ) for the initial scan. Often with default parameters such as zmap setting ip id to 54321, having tcp initial window…

comment by nonamesleft · 2024-06-16 · in What You Get After Running an SSH Honeypot for 30 Days

I'm not sure about the article, but the blazingly-fast IP scanner sounds a lot like Masscan: https://github.com/robertdavidgraham/masscan It can scan the entire Internet in 5 minutes and has received a lot of press.…

comment by troydavis · 2023-03-02 · in Ask HN: Looking for an Old Article

"Not hard", to say the least, yeah: https://github.com/robertdavidgraham/masscan

comment by nousermane · 2022-08-29 · in Large scale Internet SSH brute force attacks seem to have stopped here

…also connection obviously) can scan the entire IPv4 space (+ all ports) in ~5 minutes. Source Code: https://github.com/robertdavidgraham/masscan Article from PoC || GTFO with more internal details on how it works:…

comment by chockchocschoir · 2022-03-13 · in Who's Attacking My Server?

…and well-built tool. Excellent use of sequence numbers for stateless send/receive (SYN cookies): https://github.com/robertdavidgraham/masscan/blob/master/src... (very well-documented source too, a pleasure to read). I once (2016) used it…

comment by wfn · 2021-09-28 · in Masscan: TCP port scanner, scanning entire Internet in under 5 minutes

Well, keep reading the README, then :) see PF_RING: https://github.com/robertdavidgraham/masscan#pf_ring

comment by wfn · 2021-09-28 · in Masscan: TCP port scanner, scanning entire Internet in under 5 minutes

▲ 469

Masscan: TCP port scanner, scanning entire Internet in under 5 minutes

story by ducktective · 2021-09-28 · 130 comments

…and find targets in an automated fashion. It advertises scanning the internet in 5 minutes. [0]: https://github.com/robertdavidgraham/masscan

comment by Shank · 2021-06-24 · in Hacker deleted all of NewsBlur’s Mongo data and is now holding the data hostage

If you read these comments organizations are threatening legal action and reports to law enforcement. https://github.com/robertdavidgraham/masscan/blob/master/dat...

comment by wil421 · 2020-10-09 · in Some idiot is using your tool to mass scan our network

…#Information Security Officer #General Dynamics #Electric Boat # #C 860-625-0605 #P 860-433-1553 https://github.com/robertdavidgraham/masscan/blob/master/dat...

comment by johndbritton · 2020-10-09 · in Some idiot is using your tool to mass scan our network

The tool that can do it in 6 minutes is massscan, the original repo of which is the link of the post: https://github.com/robertdavidgraham/masscan Note that "scan the internet in 6 minutes" only means this tool is capable of generating…

comment by Qub3d · 2020-10-09 · in Some idiot is using your tool to mass scan our network

…explicitly acknowledges that the tool is meant to mass-scan the internet and that it's a bad thing: https://github.com/robertdavidgraham/masscan#how-to-scan-the... >While useful for smaller, internal networks, the program is really…

comment by simias · 2020-10-09 · in Some idiot is using your tool to mass scan our network

…to the maintainer/author of this software. You can read them here, in the ip range blacklist: https://github.com/robertdavidgraham/masscan/blob/master/dat... If you don't want people on the internet to connect to your server, then you…

comment by bjeds · 2020-10-09 · in Some idiot is using your tool to mass scan our network

This is entertaining: https://github.com/robertdavidgraham/masscan/blob/master/dat...

comment by ryanjshaw · 2020-10-09 · in Some idiot is using your tool to mass scan our network

▲ 287

Some idiot is using your tool to mass scan our network

story by Garbage · 2020-10-09 · 182 comments

…probably run massscan[1] while out at lunch and probably touch every ipv4 host on the internet. https://github.com/robertdavidgraham/masscan

comment by ed25519FUUU · 2020-09-23 · in Check if your IP is exposing any ports. If you see 404 page, nothing is exposed

…proverbial script kiddie running a scan from home, but are those really a threat to your SSH setup? https://github.com/robertdavidgraham/masscan

comment by the8472 · 2020-09-21 · in Moving your SSH port isn’t security by obscurity

…You'd still be advised to disable password-based auth and/or configure fail2ban, though. [1] https://github.com/robertdavidgraham/masscan

comment by kees99 · 2020-01-23 · in Persistant SSH Threats?

…is a tire fire, but it worked well for what we needed :) [1] https://github.com/sdshlanta/ssher [2] https://github.com/robertdavidgraham/masscan

comment by sdmike1 · 2019-10-29 · in Cluster SSH – Manage Multiple Linux Servers Simultaneously

In fact, there's a tool that claims to scan the internet in 6 minutes: https://github.com/robertdavidgraham/masscan

comment by nighthawk454 · 2019-09-09 · in Show HN: Enter your URL and view CVEs affecting your stack over last 6 months

…useful, let me know :)). [1]: https://en.wikipedia.org/wiki/Format-preserving_encryption#T... [2]: https://github.com/robertdavidgraham/masscan/blob/6c15edc280... [3]: https://github.com/bbc2/shuffled

comment by berbc · 2019-02-14 · in Fast Perfect Hashing

…defcon.org/DEF%20CON%2024/DEF%20CON%2024%20pre... [1] https://www.youtube.com/watch?v=o7qDVZr0t2c [2] https://github.com/robertdavidgraham/masscan

comment by DyslexicAtheist · 2019-02-09 · in I scanned Austria

https://zmap.io/ https://github.com/robertdavidgraham/masscan it will be attacked within minutes, you should start a honeypot and see for yourselves

comment by tty7 · 2018-10-21 · in A honeypot programmed in Micropython for the ESP8266

▲ 3

TCP port scanner, scanning entire Internet in under 5 minutes

story by magnetised · 2018-09-26 · 0 comments

…but I would expect many instances of scanning would be seen everyday. [0]: https://zmap.io/ [1]: https://github.com/robertdavidgraham/masscan [2]: https://memcachedscan.shadowserver.org/

comment by zmapuser · 2018-09-19 · in The Mirai Botnet Architects Are Now Fighting Crime with the FBI

▲ 1

Is masscan sending all IP ranges to Net systems research?

story by xybool · 2018-01-15 · 0 comments

I wonder if you could use nmap or something like masscan( https://github.com/robertdavidgraham/masscan ) to figure the IP addresses of people using a certain software(say mongodb on port 27017). And then reverse looking up those IPs to…

comment by RabbitmqGuy · 2017-01-12 · in How We Found All of Optimizely's Clients

https://github.com/robertdavidgraham/masscan

comment by rhizome · 2016-11-21 · in This security camera was infected by malware 98 seconds after it was plugged in

…dangers of making queries on a user's behalf. Good list of ipv4 ranges you should not allow: https://github.com/robertdavidgraham/masscan/blob/master/dat...

comment by Pharaoh2 · 2016-10-10 · in EC2's most dangerous feature

masscan: https://github.com/robertdavidgraham/masscan

comment by jlgaddis · 2016-09-18 · in Ever wondered how many open FTP servers there are?

Scanning. See for example: https://github.com/robertdavidgraham/masscan

comment by ryanlol · 2016-08-24 · in 455 Tb of live streaming were transferred during the Olympic Games Rio 2016

Yep, worth a read, especially if you're considering doing this kind of scan for yourself. https://github.com/robertdavidgraham/masscan/blob/master/dat...

comment by voltagex_ · 2016-08-10 · in MASSCAN: Mass IP port scanner

▲ 61

MASSCAN: Mass IP port scanner

story by ntumlin · 2016-08-10 · 33 comments

…send the packets that fast. No promises the target will be able to respond that fast. See https://github.com/robertdavidgraham/masscan

comment by devicenull · 2016-05-22 · in TOTP SSH port fluxing

another, newer alternative is https://github.com/robertdavidgraham/masscan note that doing this is a very good way to get angry letters from your ISP

comment by ATsch · 2016-03-27 · in VNC Roulette

Pentester: I'll use mass scan, someone else already solved this problem. https://github.com/robertdavidgraham/masscan

comment by raesene2 · 2016-02-14 · in A Modern App Developer and an Old-Timer System Developer Walk into a Bar

…analyze, or generate traffic on levels which are at least the the scale of a large company (e.g. https://github.com/robertdavidgraham/masscan ).

comment by acdha · 2015-09-07 · in Bypassing the Linux kernel for high-performance packet filtering

…if you don't want to pay shodan for search results, you could run your own port scan using masscan( https://github.com/robertdavidgraham/masscan ) by running the command masscan -p27017 0.0.0.0/0 --excludefile data/exclude.conf Be warned…

comment by obblekk · 2015-07-19 · in Finding MongoDB instances without any authentication

Here ya go: https://github.com/robertdavidgraham/masscan @collinrm I just took masscan, changed the HTTP request, then tweeked the code to generate a small TTL. Source: https://twitter.com/ErrataRob/status/583433175302479872

comment by itistoday2 · 2015-04-02 · in Pin-pointing China's attack against GitHub

…to hit every space and they've never been quite as efficient in space/time complexity as his. [ https://github.com/robertdavidgraham/masscan#randomization ]

comment by Zaheer · 2014-12-28 · in Masscan: Scan the entire Internet in under 5 minutes

…back at their source IPs. Massscan ships with an exclude list which you would do well to utilize: https://github.com/robertdavidgraham/masscan/blob/master/dat... If you try to run an internet wide massscan without this list, it will stop…

comment by gcommer · 2014-12-28 · in Masscan: Scan the entire Internet in under 5 minutes

▲ 147

Masscan: Scan the entire Internet in under 5 minutes

story by pmoriarty · 2014-12-27 · 29 comments

not related to this project, but rob is the instigator for massscan ( https://github.com/robertdavidgraham/masscan ) as well, whic claims to scan the entire ipv4 space in approx 6 minutes!!!

comment by signa11 · 2014-12-27 · in Robdns – A fast DNS server based on C10M principles

▲ 138

Masscan: scan the entire Internet in under 6 minutes, 10 million packets/second

story by nvk · 2013-09-16 · 30 comments