Attackers Without Borders: The View Of Global Malicious Traffic For The Kingdom of Saudi Arabia

Summary: GreyNoise Labs analyzed 30 days of October 2023 sensor data and observed 52,602 malicious exploitation attempts against Saudi Arabia's IP address space and 2,204 attacks originating from Saudi-assigned networks. Mirai and SSH bruteforcing led the inbound tags, and only 304 of the inbound attempts (0.58%) were directed solely at the Kingdom.
Key Takeaway: Mobile networks ranked fourth among sources of malicious connection attempts, and blocking them is hard when mobile traffic is roughly 40-50% of all benign inbound traffic to most websites. The report also notes a default or misconfigured system left exposed for under an hour can be absorbed into the adversarial inventory used for later targeted attacks.

Read the original at GreyNoise Blog ↗