Geolocation based visualisation
A while back a wrote some code to visualise the traffic sources captured by a network telescope. I used MaxiMind geolocation lookup to get the latitude and longitude for a given ip address through their python API. I then wrote another script to interface with nmap and do a portscan + OS identification on that host, the data was parsed and inserted into a sqlite3 database.
Once I get the code cleaned up a bit more I'll post it online and add a link to a demo.
These are some images illustrating the visualisation, I used three different coloured markers to indicate the age of the data, it also happened to indicate how constant a general area was at producing traffic. Every 5 seconds a new marker would be added to the map, the data set I used from the network telescope contained about 300 unique hosts (whose details I could enumerate).
The 25 newest traffic sources were green, the next 100 was yellow and the following 300 was light grey. Only newest 5 hosts data show in an info window, as a new source is shown the fifth one's info window would close. Clicking on a marker would open its info window. The info windows showed the ip address, open ports and operating system of a host. I used JavaScript with the google maps API to create the visualisation and exposed the sqlite3 database through a php script with some ajax.