View of all the collected data without the web probes

The data presented in this map have been collected by the Honeynet Research Alliance .Currently six honeynets around the globe collect data and store them in a centralized database. Since honeynets do not have any traffic of their own, whatever packet enters is considered suspicious. It is this idea that makes data collected by honeynets very valuable, with very few or even without any false positives or false negatives. In this plot web probes have been excluded since they are mainly created by worms like Code Red and Nimda and have a nearly random distribution. If you want to see how this map would look like with the web probes follow this link.

 

 
With port 80 (web) probes
 
Without port 80 (web) probes
Map with all recorded activity Map with last month's recorded activity
Map with last month's recorded activity Map with last week's recorded activity
Map with last week's recorded activity Map with last 5 days recorded activity
Map with last 5 days recorded activity Map with last day's recorded activity
Map with last day's recorded activity