Skip to content
Threat Note Threat Note

Aggregating Cyber Insights

  • Articles
  • Breaches
  • Learning
  • News
  • Podcast
  • Research
  • Toolkit
  • Vulnerabilities
  • Webinars
  • About Us
  • Home
  • News
  • From Cyber Security News – Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals
From Cyber Security News – Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals
Posted inNews

From Cyber Security News – Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals

Posted by shaikh Saqib April 1, 2025

 Researchers have detected an alarming surge in malicious scanning activity targeting Palo Alto Networks’ GlobalProtect VPN portals.  Over a 30-day period, nearly 24,000 unique IP addresses have attempted to access these critical security gateways, suggesting a coordinated effort to probe network defenses and identify vulnerable systems. The campaign began on March 17, 2025, with activity
The post Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals appeared first on Cyber Security News. Read More

Share this:

  • Click to share on Facebook (Opens in new window) Facebook
  • Click to share on X (Opens in new window) X
Tags:
3xK Tech GmbHcommand injection vulnerabilityCVE vulnerabilitiesCVE-2024-3400CVSS 10.0 vulnerabilitycyber awarenesscyber defensecyber protectioncybersecuritycybersecurity newscybersecurity scanningcybersecurity threatsdata breachesdigital privacyespionage campaignFast Servers Pty Ltd.GlobalProtect VPNGreyNoisehackinghacking newsinfosecinfosec newsIP address scanningJA4h network fingerprintslogin scanner toolmalicious IP addressesmalicious scanningnetwork reconnaissancenetwork securitynoteonline securityOy Crea Nova Hosting.Palo Alto NetworksPAN-OS CrawlerPAN-OS exploitationPAN-OS vulnerabilitiespatch managementperimeter network devicesPureVoltage Hostingreconnaissance trafficroot privilege escalationsecurity monitoringsecurity perspectivesecurity updatessuspicious IP addressesthreatthreat huntingthreat intelligencethreat notethreatnoteunauthenticated attackers
Last updated on April 2, 2025

Latest Posts

  • From Security Week – Juniper Networks Patches Critical Junos Space VulnerabilitiesOctober 10, 2025
  • From Security Week – ZDI Drops 13 Unpatched Ivanti Endpoint Manager VulnerabilitiesOctober 10, 2025
  • From The Hacker News – From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox VulnerabilityOctober 10, 2025
  • From Cyber Security News – New Android Malware ClayRat Mimic as WhatsApp, Google Photos to Attack UsersOctober 10, 2025
  • From Security Week – Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to DateOctober 10, 2025