Attackers Without Borders: The Australian View of Global Malicious Traffic

Summary: GreyNoise Labs analyzed 30 days of sensor data between mid-August and mid-September 2023 and observed 111,073 malicious exploitation attempts against Australia IP address space, plus 3,292 attacks originating from Australia against other countries' networks. Of the inbound attempts, 667 (0.6%) were directed only at Australia, and the Mirai botnet held the top detection tag, with mobile networks ranking third as a source category.
What you should know: Mobile networks sit third on the source list, and defenders cannot easily block them because they carry roughly 40-50% of all benign traffic to most websites and web applications. Australia's IP space also carries a higher positive reputation than many countries, so risk-based perimeter trust decisions are more likely to let connections from Australian sources through.

Read the original at GreyNoise Blog ↗