Sea Turtle

The attacker is actively scanning the internet for vulnerable hosts, and then compromising those hosts for future malicious activity.