Advisory: Why You Should (Still) Care About Inbound Network Scans

Cato Research observed thousands of Internet scans—predominantly targeting HTTP, Microsoft RDP, and SQL services and originating mainly from China, Latvia, Netherlands, Ukraine, and the US—and warns these scans are being used by attackers (including recent ransomware campaigns) to find and exploit exposed services; the report recommends avoiding Internet exposure of servers, restricting IP access, and applying IPS and geo-restrictions to reduce risk.