Initial Access Threat Intelligence
VPN / remote-access discovery, authentication attempts, and high-confidence exploit activity observed by Senda Nexus
Interpretation: This page shows observed initial-access activity against VPN and remote-access surfaces. Ransomware relevance describes a known relationship between a vulnerability/vector and ransomware initial access; it does not attribute an observed source IP to ransomware and does not prove successful compromise.
VPN Target Products
Observed sessions by product
Initial Access Activity
Stage counts are not mutually exclusive
Activity Trend
Observation-time buckets (JST)
Observed VPN Candidate CVE Trend
High-confidence / explicit mappings by observation time
ATT&CK Initial Access Context
Context, not actor attribution
Source IP Observations
Prioritized by exploit → authentication → total sessions
| Source IP | Products | Discovery | Auth Attempts | Exploit Attempts | Candidate CVEs | Risk | Last Seen |
|---|
Loading methodology...