Attackers Without Borders: The Japanese View Of Global Malicious Traffic

Summary: GreyNoise Labs analysed 30 days of malicious traffic between mid-September and mid-October 2023 and observed 138,379 malicious exploitation attempts against Japan's IP address space and 11,230 attacks originating from Japan-attributed networks. Of the inbound attempts, 1,381 (1.0%) were directed only at Japan, and the outbound tag distribution was nearly identical to the inbound, with Mirai botnet activity in the top spot and mobile networks fourth among source categories.
Why it matters: Mobile networks now rank fourth as a source of attack traffic, yet they carry roughly 40-50% of all benign traffic to most websites, so blocking them is a hard argument to win with application owners. And because Japanese IP space carries a higher positive reputation than many countries, risk-based perimeter trust decisions are more likely to let connections from Japan sources through.

Read the original at GreyNoise Blog ↗