APT28 has been scanning vulnerable email servers for more than a year

Scans have been observed against webmail and Microsoft Exchange Autodiscover servers.