Research Article
ICSTrace: A Malicious IP Traceback Model for Attacking Data of the Industrial Control System
Table 5
Clusters and their labels of organization.
| | Cluster | IP count | Auxiliary information | Organization |
| | 1 | 93 | 22 IPs are mapped to the domain name shodan.io | Shodan | | 2 | 180 | 14 IPs are mapped to the domain name eecs.umich.edu | Censys | | 3 | 75 | 8 IPs are mapped to the domain name neu.edu.cn | Detecting | | 4 | 43 | 5 IPs are mapped to the domain name plcscan.org | Beacon Lab | | 11 | 51 | 26 IPs are mapped to the dynamic domain name binaryedge.ninja | binaryedge.ninja | | 13 | 11 | 4 IPs are mapped to the domain name neu.edu.cn | Detecting | | 14 | 17 | 6 IPs are mapped to the dynamic domain name amazonaws.com | amazonaws.com | | 15 | 20 | 17 IPs are located in China | China Org | | 17 | 35 | 25 IPs are mapped to the dynamic domain name members.linode.com | linode.com | | 18 | 14 | 11 IPs are located in China | China Org | | 19 | 14 | 12 IPs are located in Europe | Europe Org | | 20 | 9 | 7 IPs are located in China | China Org |
|
|
