Yes we've started seeing this recently, restricting the port forwarding on the firewall to known IPs works.