TSUBAME Report Overflow (Jan-Mar 2024)

JPCERT/CC’s TSUMABE Report Overflow (Jan–Mar 2024) summarizes global sensor observations showing sustained, widespread scanning with 23/TCP dominating—approximately 70% Mirai-type traffic—alongside frequent probes to 6379/TCP, 22/TCP, 8080/TCP, 80/TCP, and ICMP; it identifies commonly affected Internet-exposed devices (surveillance cameras, DVRs, NAS, routers), notes evolving attack patterns leveraging newly discovered vulnerabilities, compares Japan vs. overseas sensor trends, and provides practical hardening guidance (e.g., Internet access rules, post-installation port scans, SHODAN checks) while reporting ongoing vendor coordination and no special alerts this quarter.