Internet Background Noise (IBN)
Besides the legitimate IP traffic on the Internet, we see a lot of garbage packets, destinated to IP addresses within the SWITCH network address space where no device is listening for. They result from wrong configured systems, network scans, Internet worms as well as side effects from denial of service attacks and further more.
All these IP packets make up - what we call - the Internet Background Noise and are routed to our IBN sensor, which generates some nice, useful pictures. The potential IP address space is about three /17 address blocks.
Below you see the current situation today:
The first picture gives you an overview about to total IP background noise
split into the protocols TCP, UDP and ICMP. The more detailed pictures for TCP
and UDP show the most frequently destination ports. ICMP is split into the
various ICMP types. Ports and ICMP types below the visible range in the picture
are suppressed.
The statistics are evaluated every five minutes. The y-Axis shows the number
of packets accumulated within these five minutes. The x-Axis shows the current
local time (MET). All picture are updated every 15 minutes. All plots are
accumulated line graphs, generated with
jpgraph.
Click on each picture to enlarge.
linear / logarithmical presentation.
Historical characteristics of total noise traffic:
