Massive Attack on SonicWall Firewalls Using Over 4,000 IP Addresses

Massive Attack on SonicWall Firewalls Using Over 4,000 IP Addresses

First seen 2 Mar 2026, 13:10 UTC GbhackersCybersecuritynewsCyberpress 86% similarity 31.9

Article Content

Browse articles
ThreatCluster

A reconnaissance campaign targeting SonicWall firewalls is underway, with attackers utilizing over 4,000 unique IP addresses to identify vulnerable devices. From February 22 to February 25, 2026, there were 84,142 scanning sessions aimed at SonicWall SonicOS infrastructure, indicating a significant threat to users of these firewalls.

ThreatCluster AI How this analysis works

Timeline

2026-02-22
Attackers began scanning SonicWall firewalls
2026-02-25
Scanning sessions totaled 84,142 against SonicWall infrastructure
2026-03-02
Articles published reporting on the ongoing attack

Community

Browse all →

Tracked Entities in This Story