A massive brute-force campaign targeting Apache Tomcat Manager interfaces has been detected, with 295 malicious IP addresses attempting to breach exposed servers globally. The coordinated attack, which spiked on June 5, 2025, primarily originated from the US, UK, Germany, Netherlands, and ...
A coordinated cloud-based scanning campaign targeting 75 different vulnerabilities was detected by GreyNoise on May 8, 2025. The operation used 251 malicious IP addresses hosted on Amazon's infrastructure in Japan, targeting vulnerabilities in Adobe ColdFusion, Apache Struts, Atlassian Con...
A significant surge in scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect gateways has been detected, with nearly 24,000 unique IP addresses probing these systems between March 17-26, 2025. The campaign primarily originated from the US, Canada, Finland, Netherlands, and Ru...
