It shows allowed on some models and/or depending on their utilisation which isn't ideal.There is also a concern that so many Meraki customers are seeing the same alerts

I just found this off the back of Vbrites sandbox investigation.https://blogs.cisco.com/security/cisco-live-melbourne-soc-reportThe section titled "Mirai Botnet Attempts" is the interesting part.It details what vbrites has seen, almost line for line....

Thanks for this investigation. Its more than I've gotten from Meraki since this all started happening.Although the attempt might not be succeeding (hopefully), my original and continued issue of this affecting multiple meraki customers from the same ...

I'd block 162.248.224.101. It seems to be what the attempt is trying to reach out to in order to download a malicous payload of some kind

Hi,It's been happening almost daily for us since this was first posted. I've got into the habit of checking the alerts each morning and adding any new ips to the firewall rules block as well as layer 7 blocks and reporting the ip to the ispUnfortunte...