Attackers Without Borders: The French View Of Global Malicious Traffic

Summary: GreyNoise Labs analysed 30 days of sensor data between mid-September and mid-October 2023 and observed 111,073 malicious exploitation attempts against French IP address space and 3,292 attacks originating from France against other countries' networks. Of the inbound attempts, 667 (0.6%) were directed only at France, and the outbound tag distribution was nearly identical to the inbound, with Mirai botnet activity consistently in the top spot.
Key Takeaway: Mobile networks ranked fourth as a source of attack traffic, and blocking them is hard when they carry roughly 40-50% of all benign traffic to most websites and web applications. GreyNoise also notes that a default or misconfigured system left on the internet for less than an hour can become part of the adversarial inventory.

Read the original at GreyNoise Blog ↗