Create mikrotik-cve-2018-14847.txt
Create mikrotik-cve-2018-14847.txt

[0] https://blog.netlab.360.com/7500-mikrotik-routers-are-forwarding-owners-traffic-to-the-attackers-how-is-yours-en/

Yes, IPs are not desirable, but this kind of malicious Mikrotik backflow traffic should be detected in some way.

Despite on ``` 2018-09-05 11:00 GMT+8, with the generous help from the AS64073, 103.193.137.211 has been promptly suspended and is no longer a threat.``` I left mentioned IP in list as a possible semaphore.
stamparm/maltrail,stamparm/maltrail,stamparm/maltrail,stamparm/maltrail