TSUBAME Report Overflow (Jul-Sep 2024)

JPCERT/CC’s TSUBAME Report Overflow for Jul–Sep 2024 summarizes global sensor observations showing elevated scanning activity—particularly on 23/TCP, 8728/TCP, 22/TCP, 80/8080/TCP, ICMP, 6379/TCP, and 3389/TCP—with many sources traced to TP-LINK Wi‑Fi routers running outdated firmware, suggesting compromise by IoT botnets (e.g., Mirai-like). The report compares Japan vs. overseas sensor trends, lists top ports per sensor, and advises using supported devices, updating firmware, and restricting Internet exposure; no special alerts or specific IOCs are included.