Threat Intelligence Feed — Tag: PANOS_SSH_ACCESS

Automated SSH brute force activity observed from IP 175.118.127.138 (Seoul, South Korea) targeting network infrastructure with root credential attacks over a 12-day period. Assessed as low-to-medium threat level opportunistic scanning with standard attack patterns. Recommend implementing SSH hardeni…

A moderate-volume SSH brute force campaign originating from Polish IP address 195.136.224.101 targeted network infrastructure over a 5-day period from April 6-11, 2026, generating 233 attack events. The activity represents low-sophistication credential stuffing attacks against SSH services with no e…