Attackers Without Borders: The View Of Global Malicious Traffic For The Netherlands

Summary: GreyNoise Labs analysed 30 days of October 2023 traffic from its global sensor network and observed 125,362 malicious exploitation attempts against The Netherlands' IP address space, plus 5,207 attacks originating from The Netherlands against other countries' networks. Of the inbound attempts, 800 (0.64%) were directed only at The Netherlands, and the top detections were the Mirai botnet and SSH bruteforcers, with mobile networks ranking fourth among source categories.
What you should know: Only 0.64% of inbound exploitation attempts were aimed solely at Dutch networks, which the report reads as a sign that country-level defenses may be pushing attackers to target elsewhere - a margin that depends on ISPs, hosting providers, and mobile carriers keeping that reputation intact. Mobile networks sitting fourth among attack sources matters because defenders are being asked to block traffic that makes up roughly 40-50% of all benign inbound connections to most websites.

Read the original at GreyNoise Blog ↗