Over the last several months we have continued to see and report on NETCORE and MicroTik exploits. This activity continually is scanning for vulnerable home router that have built in backdoors.
Many of these attackers are scanning the entire Internet range daily and are actively exploiting routers and devices.
18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124
Additional IOCS 2/14/2019:
126.96.36.199 188.8.131.52 184.108.40.206