Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/greynoise/statuses/115578391042534648">GreyNoise (greynoise@infosec.exchange)'s status on Thursday, 20-Nov-2025 06:09:27 JST</a><a href="https://infosec.exchange/@greynoise" title="greynoise@infosec.exchange"><img src="https://gnusocial.jp/avatar/239158-48-20240209210313.webp" width="48" height="48" alt="GreyNoise" style="position: absolute; left: 0; top: 0;">GreyNoise</a></section><article><p>🚨 Palo Alto GlobalProtect scanning surged 40X in 24hrs...a 90-day high.<br>2.3M login attempts from concentrated infrastructure (AS200373/AS208885).<br>Block these IPs now: <a href="https://www.greynoise.io/blog/palo-alto-scanning-surges-90-day-high" rel="nofollow">https://www.greynoise.io/blog/palo-alto-scanning-surges-90-day-high</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5878477#notice-11550019">In conversation</a><time datetime="2025-11-20T06:09:27+09:00" title="Thursday, 20-Nov-2025 06:09:27 JST">about 3 months ago</time> <span>from <span><a href="https://infosec.exchange/@greynoise/115578391042534648" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@greynoise/115578391042534648">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: cdn.prod.website-files.com</div><h5><a href="https://www.greynoise.io/blog/palo-alto-scanning-surges-90-day-high">Palo Alto Scanning Surges 40X in 24 Hours, Marking 90-Day High</a></h5><div></div></header><div>GreyNoise has identified a significant escalation in malicious activity targeting Palo Alto Networks GlobalProtect portals. Beginning on 14 November 2025, activity rapidly intensified, culminating in a 40x surge within 24 hours, marking a new 90-day high.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
GreyNoise (greynoise@infosec.exchange)'s status on Thursday, 20-Nov-2025 06:09:27 JST GreyNoise
🚨 Palo Alto GlobalProtect scanning surged 40X in 24hrs...a 90-day high.
2.3M login attempts from concentrated infrastructure (AS200373/AS208885).
Block these IPs now: https://www.greynoise.io/blog/palo-alto-scanning-surges-90-day-high
In conversationabout 3 months ago from infosec.exchangepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: cdn.prod.website-files.com
  Palo Alto Scanning Surges 40X in 24 Hours, Marking 90-Day High
  GreyNoise has identified a significant escalation in malicious activity targeting Palo Alto Networks GlobalProtect portals. Beginning on 14 November 2025, activity rapidly intensified, culminating in a 40x surge within 24 hours, marking a new 90-day high.

Public

Embed Notice

HTML Code

Corresponding Notice