Darknet - Flows count
|
Three rankings are published for darknet activity: total flows observed, most often queried destination ports, most common source ports. In comparison to firewall sources, darknets monitor a much larger IP space. They are in essence simplified honeypots – unused IP addresses are monitored but with no interaction with the observed traffic whatsoever. As such, they are mostly useful as anomaly detectors.
Clicking on a 24 hour activity graph leads to weekly and monthly activity graphs. |
|
|