Yeap I need to coffee before I try to math, not sure how I got to 4^32. Thats an interesting point - I wonder if anyone has the numbers on how long it would ta

Yeap I need to coffee before I try to math, not sure how I got to 4^32. Thats an interesting point - I wonder if anyone has the numbers on how long it would take to poke each tcp port on each IPv4 address? or has done it? One could argue that with an SSH 0day you'll infect 99% of hosts by hitting port 22 alone, and the 65000x effort required to find the others is of marginal return. A counter-point to that is that you may find some more interesting systems hanging out on other ports - less home routers and more boxes used by people who changed the default port as the kind of "hardening" procedure we're talking about in this thread.