Over the last several months we have continued to see and report on NETCORE and MicroTik exploits. This activity continually is scanning for vulnerable home router that have built in backdoors.
Many of these attackers are scanning the entire Internet range daily and are actively exploiting routers and devices.
188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206
Additional IOCS 2/14/2019:
220.127.116.11 18.104.22.168 22.214.171.124