threat infrastructure

800 servers gone, the scans kept coming

Dutch FIOD seized 800 servers from AS209847. One week later the scan rate is unchanged. What that signal actually means.