logo

TSUBAME Report Overflow (Apr-Jun 2023)

ID: b75ec119-2fa3-5b10-9296-22d60f5a0f3e

STIX ID: report--b75ec119-2fa3-5b10-9296-22d60f5a0f3e

Feed Name: JPCERT Blog

Date Published: 2023-09-26

Date Updated: 2026-04-19

Author: 鹿野 恵祐 (Keisuke Shikano)

...
...

The TSUBAME Report Overflow (Apr–Jun 2023) analyzes global internet scan trends observed by expanded TSUBAME sensors now deployed across 17 regions, comparing Japan with overseas locations and highlighting regional differences in scan volumes. Consistently targeted ports include 23/TCP (Telnet), 6379/TCP (Redis), 22/TCP (SSH), 80/TCP (HTTP), along with 445/TCP, 3389/TCP, 5555/TCP, and 37215/TCP, indicating broad interest in common services. While no special alerts were issued this quarter, the report underscores the importance of multi-point monitoring to detect unusual changes and better understand scanner interests.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.