Commercial network scanner routinely run by ransomware affiliates for share discovery.
Read the full analysis on IntelFusions