Tuesday, April 21, 2015
ALERT: 18.104.22.168/16 Netblock Extremely Active and Noisy
We wanted to put out an alert that many of our sensors and clients are reporting inbound SMTP infected dyzera and ssh scanning. What's interesting is that the actors appears to not care how noisy they are. We highly recommend blocking the entire /16 netblock.