TSUBAME Report Overflow (Jul-Sep 2023)

The report summarizes TSUBAME sensor observations from July–September 2023, noting spikes in suspicious scanning traffic tied to routers from a Japanese manufacturer—likely exposed/compromised industrial devices—with remediation coordinated through ISPs and ongoing outreach to the vendor. It compares Japan vs. overseas telemetry and highlights widely scanned services (e.g., 23/TCP, 6379/TCP, 22/TCP, 80/443/8080), stressing continued monitoring for network-wide scanning trends.