Cybersecuritynews
Massive Attack on SonicWall Firewalls Using Over 4,000 IP Addresses
First seen 2 Mar 2026, 13:10 UTC
•

•86% similarity
•31.9
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A reconnaissance campaign targeting SonicWall firewalls is underway, with attackers utilizing over 4,000 unique IP addresses to identify vulnerable devices. From February 22 to February 25, 2026, there were 84,142 scanning sessions aimed at SonicWall SonicOS infrastructure, indicating a significant threat to users of these firewalls.
ThreatCluster AI
How this analysis works
Timeline
2026-02-22
Attackers began scanning SonicWall firewalls
2026-02-25
Scanning sessions totaled 84,142 against SonicWall infrastructure
2026-03-02
Articles published reporting on the ongoing attack