Here's a list of IP addresses and etc. that you should block on your networks:
185.17.1.45
172.93.97.53
158.69.128.105
91.217.90.125
178.170.189.57
81.177.23.247
198.105.208.108
45.55.14.62
158.69.201.47
12.230.209.137
185.49.68.215 <<< This one is serving up CryptXXX ransomware.
198.105.208.101
195.22.28.196
Might want to directly PM this to Hyack/Trev aswell, just to make sure it's seen ASAP
I pinged them, thanks!
None in China? We have large swaths blocked from there.