Cloud Telescope Internet Background Radiation May 2023

This dataset results from a month-long cloud-based Internet Background Radiation observation conducted in May 2023. A sensor fleet comprised of 260 EC2 compute instances was deployed within Amazon Web Services across their 26 commercially available regions, 10 sensor per region. The dataset contains 21,856,713 incoming packets, out of which 17,008,753 are TCP datagrams, 3,076,855 are ICMP packets and the remainder, 1,770,418 are UDP messages. Top TCP traffic affected by malicious activity includes port 23 (Telnet), 22 (SSH), 80 (HTTP), 443 (HTTPS), 445 (SMB), among other. Top UDP traffic includes port 9000, 123 (NTP) and 53 (DNS), among other. Sensors were deployed in all viable AWS Regions. It is possible to trace IP addresses back to the following regions and countries:af-south-1, ap-east-1, ap-northeast-1, ap-northeast-2, ap-northeast-3, ap-south-1, ap-south-2, ap-southeast-1, ap-southeast-2, ap-southeast-3, ca-central-1, eu-central-1, eu-central-2, eu-north-1, eu-south-1, eu-south-2, eu-west-1, eu-west-2, eu-west-3, me-central-1, me-south-1, sa-east-1, us-east-1, us-east-2, us-west-1 and us-west-2 Supporting paper is currently provided as direct link. Link will be updated once CloudNet 2023 gets indexed on Xplore.