/
attack_type:scanning × latest_source_host:greynoise.io × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

greynoise.io · medium

GreyNoise Reports 597,000-Session Spike in SonicWall SonicOS API Scanning, Echoing Pattern Before CVE-2026-0400

Between May 9 and May 18, 2026, GreyNoise observed a major spike in scanning of SonicWall SonicOS management interfaces. The May 12 peak of about 597,000 sessions was the largest single-day total on the SonicWall SonicOS API Scanner tag in 90 days, roughly 46x the typical daily volume. Earlier spikes on this tag (January 18, January 30 an…

greynoise.io · medium

GreyNoise: 242,666 Unverified Hong Kong Scanning IPs Surge in a Week While UCLOUD (AS135377) Drives Real Multi-Protocol Scanning

Between March 12 and 18, 2026, the GreyNoise Observation Grid (GOG) recorded 242,666 new scanning IPs geolocating to Hong Kong, 48.9% of all new scanning IPs seen that week. 99.7% never completed a TCP handshake, so GreyNoise classes them as "spoofable" (unverified source addresses). They carried no payloads and triggered no signatures. G…