1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog
We found a cluster of 1,001 IPs across 306 networks and 64 countries, tied to eight shared staging servers and a single TLS and HTTP fingerprint that appears nowhere else, plus smaller botnets that fall into clean separate islands.
u/Honeylabs — 6 days ago