Attackers Without Borders: The United Kingdom View of Global Malicious Traffic

Summary: GreyNoise Labs analysed 30 days of sensor data between mid-August and mid-September 2023 and observed 596,817 malicious exploitation attempts against U.K. IP address space, alongside 8,293 attacks originating from U.K.-attributed networks directed at other countries. Of the inbound attempts, 20,050 (3.4%) were directed only at the U.K., and mobile networks ranked third among source categories, which researchers attribute to tethered systems and compromised Android devices.
Key Takeaway: Mobile networks sit third on the source list, yet blocking them means turning away roughly 40-50% of all benign traffic most websites receive - a trade-off defenders will have to argue through. And because U.K. IP space carries a higher positive reputation, perimeter trust decisions are more likely to let connections from U.K. sources through.

Read the original at GreyNoise Blog ↗