1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog
Source: Reddit
Published:
<p>We found a cluster of 1,001 IPs across 306 networks and 64 countries, tied to eight shared staging servers and a single TLS and HTTP fingerprint that appears nowhere else, plus smaller botnets that fall into clean separate islands. submitted by /u/Honeylabs [link] [ ]</p>