{ "generated_at": "2026-09-22T07:40:54.874Z", "api_version": "v1", "disclaimer": "Aggregated from public sources. Freshness depends on upstream feeds; this is not a commercial threat-intel feed and carries no SLA. Verify before acting.", "attribution": [ { "name": "CISA Known Exploited Vulnerabilities Catalog", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "U.S. Government public domain" }, { "name": "Feodo Tracker (abuse.ch)", "url": "https://feodotracker.abuse.ch/", "licence": "CC0, see abuse.ch terms" }, { "name": "Emerging Threats open rules", "url": "https://rules.emergingthreats.net/", "licence": "see Proofpoint ET open terms" }, { "name": "ransomware.live", "url": "https://www.ransomware.live/", "licence": "see ransomware.live terms" }, { "name": "ThreatFox (abuse.ch)", "url": "https://threatfox.abuse.ch/", "licence": "CC0, see abuse.ch terms" } ], "sources": [ { "name": "CISA KEV", "ok": true, "count": 40, "response_ms": 9, "error": null }, { "name": "Feodo Tracker", "ok": true, "count": 5, "response_ms": 22, "error": null }, { "name": "Emerging Threats", "ok": true, "count": 150, "response_ms": 26, "error": null }, { "name": "ransomware.live", "ok": true, "count": 40, "response_ms": 6, "error": null }, { "name": "ThreatFox", "ok": true, "count": 60, "response_ms": 713, "error": null } ], "count_total_available": 295, "limit_applied": 500, "count": 295, "indicators": [ { "type": "victim", "value": "Sealcon", "context": "termite — US — Manufacturing", "group": "termite", "country": "US", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "termite" ], "seenAt": "2026-09-22T02:45:36.882685+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U2VhbGNvbkB0ZXJtaXRl" }, { "type": "victim", "value": "FinSoft (Kolibri retail back-office software)", "context": "N0n — UZ — Retail & E-Commerce", "group": "N0n", "country": "UZ", "sector": "Retail & E-Commerce", "tags": [ "ransomware", "victim", "n0n" ], "seenAt": "2026-09-22T01:51:38.794148+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/RmluU29mdCAoS29saWJyaSByZXRhaWwgYmFjay1vZmZpY2Ugc29mdHdhcmUpQE4wbg==" }, { "type": "victim", "value": "TruAmerica Multifamily", "context": "termite — US — Not Found", "group": "termite", "country": "US", "sector": null, "tags": [ "ransomware", "victim", "termite" ], "seenAt": "2026-09-22T01:45:30.663148+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VHJ1QW1lcmljYSBNdWx0aWZhbWlseUB0ZXJtaXRl" }, { "type": "victim", "value": "theLender", "context": "termite — US — Financial Services", "group": "termite", "country": "US", "sector": "Financial Services", "tags": [ "ransomware", "victim", "termite" ], "seenAt": "2026-09-22T01:44:58.093768+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/dGhlTGVuZGVyQHRlcm1pdGU=" }, { "type": "domain", "value": "vuhbq05m.ewagajewskamd.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 07:35:05 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927246/" }, { "type": "ip:port", "value": "159.203.178.139:9034", "context": "Aisuru", "tags": [ "threatfox", "aisuru" ], "seenAt": "2026-09-22 07:10:42 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927245/" }, { "type": "domain", "value": "kifafijy.workers.dev", "context": "php.shin_webshell", "tags": [ "threatfox", "php.shin_webshell" ], "seenAt": "2026-09-22 07:10:13 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927244/" }, { "type": "ip:port", "value": "111.230.37.219:22", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 07:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927243/" }, { "type": "ip:port", "value": "121.43.58.113:80", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 07:05:06 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927241/" }, { "type": "ip:port", "value": "121.43.58.113:8080", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 07:05:06 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927242/" }, { "type": "ip:port", "value": "121.43.58.113:443", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 07:05:05 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927240/" }, { "type": "domain", "value": "uckvj18869.workers.dev", "context": "php.shin_webshell", "tags": [ "threatfox", "php.shin_webshell" ], "seenAt": "2026-09-22 07:04:10 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927239/" }, { "type": "ip:port", "value": "138.68.168.41:34567", "context": "Aisuru", "tags": [ "threatfox", "aisuru" ], "seenAt": "2026-09-22 06:54:59 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927238/" }, { "type": "url", "value": "https://res.gridstack.cc/", "context": "ACR Stealer", "tags": [ "threatfox", "acr stealer" ], "seenAt": "2026-09-22 06:53:35 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927237/" }, { "type": "ip:port", "value": "159.223.150.218:2538", "context": "Remus", "tags": [ "threatfox", "remus" ], "seenAt": "2026-09-22 06:50:17 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927236/" }, { "type": "url", "value": "http://178.16.54.165/", "context": "Stealc", "tags": [ "threatfox", "stealc" ], "seenAt": "2026-09-22 06:39:09 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927208/" }, { "type": "ip:port", "value": "134.209.106.204:34567", "context": "Aisuru", "tags": [ "threatfox", "aisuru" ], "seenAt": "2026-09-22 06:39:08 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927235/" }, { "type": "domain", "value": "gewebstudio.ch", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:30:31 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927234/" }, { "type": "domain", "value": "nuypoiaklber.lol", "context": "Unknown malware", "tags": [ "threatfox", "unknown malware" ], "seenAt": "2026-09-22 06:28:27 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927233/" }, { "type": "domain", "value": "5w84syyg.en-bizopp.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:26:41 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927232/" }, { "type": "ip:port", "value": "104.249.10.101:7004", "context": "XWorm", "tags": [ "threatfox", "xworm" ], "seenAt": "2026-09-22 06:20:24 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927231/" }, { "type": "url", "value": "https://runtimerailbit.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:20:20 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927229/" }, { "type": "url", "value": "https://servicestatlab.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:20:20 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927230/" }, { "type": "url", "value": "https://authshipup.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:20:19 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927228/" }, { "type": "url", "value": "https://netweblabs.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:18 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927223/" }, { "type": "domain", "value": "thumbinfo.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:18 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927224/" }, { "type": "domain", "value": "pluginyardware.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:18 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927225/" }, { "type": "domain", "value": "netweblabs.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:18 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927226/" }, { "type": "domain", "value": "bannerware.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:17 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927219/" }, { "type": "domain", "value": "assetwaveapp.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:17 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927220/" }, { "type": "url", "value": "https://thumbinfo.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:17 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927221/" }, { "type": "url", "value": "https://pluginyardware.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:17 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927222/" }, { "type": "url", "value": "https://trackbaseneo.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:16 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927215/" }, { "type": "url", "value": "https://bannerware.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:16 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927216/" }, { "type": "url", "value": "https://assetwaveapp.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:16 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927217/" }, { "type": "domain", "value": "trackbaseneo.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:07:16 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927218/" }, { "type": "domain", "value": "tawoauth.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 06:05:18 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927214/" }, { "type": "ip:port", "value": "149.88.73.83:8080", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 06:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927211/" }, { "type": "ip:port", "value": "149.88.73.83:8000", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 06:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927212/" }, { "type": "ip:port", "value": "105.158.184.236:8808", "context": "AsyncRAT", "tags": [ "threatfox", "asyncrat" ], "seenAt": "2026-09-22 06:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927213/" }, { "type": "ip:port", "value": "149.88.73.83:80", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 06:05:05 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927210/" }, { "type": "ip:port", "value": "149.88.73.83:443", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 06:05:04 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927209/" }, { "type": "domain", "value": "82uowq3m.infinityjoespizzaclearwater.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 05:34:03 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927207/" }, { "type": "ip:port", "value": "94.154.43.12:33", "context": "Mirai", "tags": [ "threatfox", "mirai" ], "seenAt": "2026-09-22 05:29:45 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927206/" }, { "type": "domain", "value": "kkrot49695.workers.dev", "context": "php.shin_webshell", "tags": [ "threatfox", "php.shin_webshell" ], "seenAt": "2026-09-22 05:15:44 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927135/" }, { "type": "domain", "value": "mspur68524.workers.dev", "context": "php.shin_webshell", "tags": [ "threatfox", "php.shin_webshell" ], "seenAt": "2026-09-22 05:12:35 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927134/" }, { "type": "ip:port", "value": "207.57.125.216:8084", "context": "VShell", "tags": [ "threatfox", "vshell" ], "seenAt": "2026-09-22 05:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927132/" }, { "type": "ip:port", "value": "149.88.73.83:22", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 05:05:07 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927133/" }, { "type": "ip:port", "value": "102.117.169.159:7443", "context": "Unknown malware", "tags": [ "threatfox", "unknown malware" ], "seenAt": "2026-09-22 05:05:06 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927130/" }, { "type": "ip:port", "value": "45.8.46.122:8090", "context": "Unknown malware", "tags": [ "threatfox", "unknown malware" ], "seenAt": "2026-09-22 05:05:06 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927131/" }, { "type": "ip:port", "value": "78.17.212.127:8080", "context": "Cobalt Strike", "tags": [ "threatfox", "cobalt strike" ], "seenAt": "2026-09-22 05:05:05 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927129/" }, { "type": "sha256 hash", "value": "4701f196c74af42b5ced01592bf4a74d54437b1c63b8aabfe1f92e9beabec769", "context": "AMOS", "tags": [ "threatfox", "amos" ], "seenAt": "2026-09-22 05:00:46 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926657/" }, { "type": "ip:port", "value": "128.90.103.184:2015", "context": "Remcos", "tags": [ "threatfox", "remcos" ], "seenAt": "2026-09-22 05:00:45 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926658/" }, { "type": "domain", "value": "dome.beatdropkec.com", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 05:00:42 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926659/" }, { "type": "domain", "value": "impact.hjdeboer.com", "context": "FAKEUPDATES", "tags": [ "threatfox", "fakeupdates" ], "seenAt": "2026-09-22 05:00:42 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926666/" }, { "type": "sha256 hash", "value": "bb2d62df63ff1726eec5e17cc9e30850c39d0a15353aa267a916bcdb75d709c6", "context": "AMOS", "tags": [ "threatfox", "amos" ], "seenAt": "2026-09-22 05:00:42 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926675/" }, { "type": "url", "value": "https://smgjamat.in/", "context": "Unknown malware", "tags": [ "threatfox", "unknown malware" ], "seenAt": "2026-09-22 05:00:40 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1927128/" }, { "type": "url", "value": "http://102.33.78.165:43065/Mozi.m", "context": "Mozi", "tags": [ "threatfox", "mozi" ], "seenAt": "2026-09-22 05:00:39 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926685/" }, { "type": "domain", "value": "danhbalbaluatsu.net", "context": "ClearFake", "tags": [ "threatfox", "clearfake" ], "seenAt": "2026-09-22 05:00:39 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926774/" }, { "type": "sha256 hash", "value": "8F096174B0DED0A598F634567C618E12808088848CD07EB99CA4AC57A744CDD9", "context": "RemoteAdmin", "tags": [ "threatfox", "remoteadmin" ], "seenAt": "2026-09-22 05:00:36 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926788/" }, { "type": "sha256 hash", "value": "D887F20EC383D7CE3A5727856BF7FA68CEB972108B6D0A5DD9924707E820DC24", "context": "RemoteAdmin", "tags": [ "threatfox", "remoteadmin" ], "seenAt": "2026-09-22 05:00:35 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926787/" }, { "type": "sha256 hash", "value": "87C640D3184C17D3B446A72D5F13D643A774B4ECC7AFBEDFD4E8DA7795EA8077", "context": "RemoteAdmin", "tags": [ "threatfox", "remoteadmin" ], "seenAt": "2026-09-22 05:00:32 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926789/" }, { "type": "sha256 hash", "value": "B7A495F517B9BF23F529552B145121F922AB4915E24B663AE68B3007DAEA3804", "context": "RemoteAdmin", "tags": [ "threatfox", "remoteadmin" ], "seenAt": "2026-09-22 05:00:32 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926790/" }, { "type": "sha256 hash", "value": "e34c9d3d3a50be99609cc843f91bbfcd0d79853b8c373c5146bcbf77643fb8c2", "context": "RemoteAdmin", "tags": [ "threatfox", "remoteadmin" ], "seenAt": "2026-09-22 05:00:32 UTC", "source": "ThreatFox (abuse.ch)", "sourceKey": "ThreatFox", "link": "https://threatfox.abuse.ch/ioc/1926810/" }, { "type": "victim", "value": "Metallco", "context": "play — BR — Manufacturing", "group": "play", "country": "BR", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "play" ], "seenAt": "2026-09-21T22:16:54.217399+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/TWV0YWxsY29AcGxheQ==" }, { "type": "victim", "value": "Hurley", "context": "play — US — Other", "group": "play", "country": "US", "sector": "Other", "tags": [ "ransomware", "victim", "play" ], "seenAt": "2026-09-21T22:16:19.325560+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/SHVybGV5QHBsYXk=" }, { "type": "victim", "value": "Astemo, Ltd.", "context": "metaencryptor — JP — Manufacturing", "group": "metaencryptor", "country": "JP", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T22:14:32.083951+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/QXN0ZW1vLCBMdGQuQG1ldGFlbmNyeXB0b3I=" }, { "type": "victim", "value": "Hogan Lovells Cadwalader", "context": "SilentRansomGroup — ? — Professional Services", "group": "SilentRansomGroup", "country": null, "sector": "Professional Services", "tags": [ "ransomware", "victim", "silentransomgroup" ], "seenAt": "2026-09-21T21:55:47.896780+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/SG9nYW4gTG92ZWxscyBDYWR3YWxhZGVyQFNpbGVudFJhbnNvbUdyb3Vw" }, { "type": "victim", "value": "kyyba.com", "context": "unsafe — FI — Technology", "group": "unsafe", "country": "FI", "sector": "Technology", "tags": [ "ransomware", "victim", "unsafe" ], "seenAt": "2026-09-21T19:23:38.618927+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/a3l5YmEuY29tQHVuc2FmZQ==" }, { "type": "victim", "value": "Spo**** Schools", "context": "nightspire — US — Education", "group": "nightspire", "country": "US", "sector": "Education", "tags": [ "ransomware", "victim", "nightspire" ], "seenAt": "2026-09-21T18:43:08.077144+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U3BvKioqKiBTY2hvb2xzQG5pZ2h0c3BpcmU=" }, { "type": "victim", "value": "Summa Gold", "context": "anubis — ? — Manufacturing", "group": "anubis", "country": null, "sector": "Manufacturing", "tags": [ "ransomware", "victim", "anubis" ], "seenAt": "2026-09-21T18:22:50.400306+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U3VtbWEgR29sZEBhbnViaXM=" }, { "type": "victim", "value": "Allied Supply Co.", "context": "Global Secret Group — ? — Manufacturing", "group": "Global Secret Group", "country": null, "sector": "Manufacturing", "tags": [ "ransomware", "victim", "global secret group" ], "seenAt": "2026-09-21T17:53:28.897930+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/QWxsaWVkIFN1cHBseSBDby5AR2xvYmFsIFNlY3JldCBHcm91cA==" }, { "type": "victim", "value": "Kjla", "context": "Global Secret Group — US — Not Found", "group": "Global Secret Group", "country": "US", "sector": null, "tags": [ "ransomware", "victim", "global secret group" ], "seenAt": "2026-09-21T17:52:29.577566+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/S2psYUBHbG9iYWwgU2VjcmV0IEdyb3Vw" }, { "type": "victim", "value": "Telrad Networks", "context": "qilin — IL — Technology", "group": "qilin", "country": "IL", "sector": "Technology", "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-21T17:22:14.870319+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VGVscmFkIE5ldHdvcmtzQHFpbGlu" }, { "type": "victim", "value": "U.S. Electrical Services and Wiedenbach Brown", "context": "moneymessage — ? — Energy & Utilities", "group": "moneymessage", "country": null, "sector": "Energy & Utilities", "tags": [ "ransomware", "victim", "moneymessage" ], "seenAt": "2026-09-21T15:12:20.806801+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VS5TLiBFbGVjdHJpY2FsIFNlcnZpY2VzIGFuZCBXaWVkZW5iYWNoIEJyb3duQG1vbmV5bWVzc2FnZQ==" }, { "type": "victim", "value": "Hudson MD Group, LLC", "context": "metaencryptor — US — Healthcare", "group": "metaencryptor", "country": "US", "sector": "Healthcare", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T13:08:14.932281+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/SHVkc29uIE1EIEdyb3VwLCBMTENAbWV0YWVuY3J5cHRvcg==" }, { "type": "victim", "value": "Bruker Corporation", "context": "metaencryptor — US — Manufacturing", "group": "metaencryptor", "country": "US", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T13:07:23.145036+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/QnJ1a2VyIENvcnBvcmF0aW9uQG1ldGFlbmNyeXB0b3I=" }, { "type": "victim", "value": "Flex Ltd", "context": "metaencryptor — US — Manufacturing", "group": "metaencryptor", "country": "US", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T13:06:25.909929+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/RmxleCBMdGRAbWV0YWVuY3J5cHRvcg==" }, { "type": "victim", "value": "HyVision System. Inc", "context": "metaencryptor — KR — Technology", "group": "metaencryptor", "country": "KR", "sector": "Technology", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T13:05:38.592556+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/SHlWaXNpb24gU3lzdGVtLiBJbmNAbWV0YWVuY3J5cHRvcg==" }, { "type": "victim", "value": "Visual Intelligence, Inc.", "context": "metaencryptor — US — Technology", "group": "metaencryptor", "country": "US", "sector": "Technology", "tags": [ "ransomware", "victim", "metaencryptor" ], "seenAt": "2026-09-21T13:04:07.966017+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VmlzdWFsIEludGVsbGlnZW5jZSwgSW5jLkBtZXRhZW5jcnlwdG9y" }, { "type": "victim", "value": "Prestige Management", "context": "akira — US — Professional Services", "group": "akira", "country": "US", "sector": "Professional Services", "tags": [ "ransomware", "victim", "akira" ], "seenAt": "2026-09-21T12:24:42.712887+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/UHJlc3RpZ2UgTWFuYWdlbWVudEBha2lyYQ==" }, { "type": "victim", "value": "Grupolider", "context": "thegentlemen — AO — Other", "group": "thegentlemen", "country": "AO", "sector": "Other", "tags": [ "ransomware", "victim", "thegentlemen" ], "seenAt": "2026-09-21T11:42:16.073177+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/R3J1cG9saWRlckB0aGVnZW50bGVtZW4=" }, { "type": "victim", "value": "The Money Store", "context": "Storm — US — Financial Services", "group": "Storm", "country": "US", "sector": "Financial Services", "tags": [ "ransomware", "victim", "storm" ], "seenAt": "2026-09-21T11:31:54.260657+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VGhlIE1vbmV5IFN0b3JlQFN0b3Jt" }, { "type": "victim", "value": "TrueCore Behavioral Solutions", "context": "Storm — US — Healthcare", "group": "Storm", "country": "US", "sector": "Healthcare", "tags": [ "ransomware", "victim", "storm" ], "seenAt": "2026-09-21T11:31:22.958248+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VHJ1ZUNvcmUgQmVoYXZpb3JhbCBTb2x1dGlvbnNAU3Rvcm0=" }, { "type": "victim", "value": "Manroc Developments", "context": "Storm — CA — Other", "group": "Storm", "country": "CA", "sector": "Other", "tags": [ "ransomware", "victim", "storm" ], "seenAt": "2026-09-21T11:30:51.754788+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/TWFucm9jIERldmVsb3BtZW50c0BTdG9ybQ==" }, { "type": "victim", "value": "Charlottesville Police Department", "context": "Doommageddon — US — Government & Defense", "group": "Doommageddon", "country": "US", "sector": "Government & Defense", "tags": [ "ransomware", "victim", "doommageddon" ], "seenAt": "2026-09-21T10:21:20.195134+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/Q2hhcmxvdHRlc3ZpbGxlIFBvbGljZSBEZXBhcnRtZW50QERvb21tYWdlZGRvbg==" }, { "type": "victim", "value": "Gomomentum.com", "context": "EndZone — ? — Not Found", "group": "EndZone", "country": null, "sector": null, "tags": [ "ransomware", "victim", "endzone" ], "seenAt": "2026-09-21T09:20:55.521959+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/R29tb21lbnR1bS5jb21ARW5kWm9uZQ==" }, { "type": "victim", "value": "IKEGAMI TSUSHINKI COMPANY LIMITED", "context": "qilin — JP — Manufacturing", "group": "qilin", "country": "JP", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-21T08:01:50.407973+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/SUtFR0FNSSBUU1VTSElOS0kgQ09NUEFOWSBMSU1JVEVEQHFpbGlu" }, { "type": "victim", "value": "siinqeebank.com", "context": "lockbit5 — SO — Financial Services", "group": "lockbit5", "country": "SO", "sector": "Financial Services", "tags": [ "ransomware", "victim", "lockbit5" ], "seenAt": "2026-09-21T06:10:58.119416+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/c2lpbnFlZWJhbmsuY29tQGxvY2tiaXQ1" }, { "type": "victim", "value": "newmantractor.com", "context": "threeam — US — Manufacturing", "group": "threeam", "country": "US", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "threeam" ], "seenAt": "2026-09-21T06:07:48.540462+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/bmV3bWFudHJhY3Rvci5jb21AdGhyZWVhbQ==" }, { "type": "victim", "value": "SECOND HOUSE", "context": "incransom — ES — Hospitality", "group": "incransom", "country": "ES", "sector": "Hospitality", "tags": [ "ransomware", "victim", "incransom" ], "seenAt": "2026-09-21T00:35:05.808718+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U0VDT05EIEhPVVNFQGluY3JhbnNvbQ==" }, { "type": "victim", "value": "Maryann Kriger", "context": "incransom — US — Not Found", "group": "incransom", "country": "US", "sector": null, "tags": [ "ransomware", "victim", "incransom" ], "seenAt": "2026-09-21T00:34:36.706236+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/TWFyeWFubiBLcmlnZXJAaW5jcmFuc29t" }, { "type": "cve", "value": "CVE-2026-7273", "context": "Zyxel GS1900 Series Switches — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability", "vendor": "Zyxel", "product": "GS1900 Series Switches", "dueDate": "2026-09-24", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-21", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-7273" }, { "type": "victim", "value": "Alabama Woman's Health Care", "context": "emperador — US — Healthcare", "group": "emperador", "country": "US", "sector": "Healthcare", "tags": [ "ransomware", "victim", "emperador" ], "seenAt": "2026-09-20T15:51:17.640727+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/QWxhYmFtYSBXb21hbidzIEhlYWx0aCBDYXJlQGVtcGVyYWRvcg==" }, { "type": "victim", "value": "acilnet.com", "context": "krybit — TR — Technology", "group": "krybit", "country": "TR", "sector": "Technology", "tags": [ "ransomware", "victim", "krybit" ], "seenAt": "2026-09-20T14:11:58.952794+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/YWNpbG5ldC5jb21Aa3J5Yml0" }, { "type": "victim", "value": "Zorlu Holding", "context": "qilin — TR — Manufacturing", "group": "qilin", "country": "TR", "sector": "Manufacturing", "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-20T12:15:03.477485+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/Wm9ybHUgSG9sZGluZ0BxaWxpbg==" }, { "type": "victim", "value": "ShopDunk", "context": "qilin — TH — Retail & E-Commerce", "group": "qilin", "country": "TH", "sector": "Retail & E-Commerce", "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-20T12:14:25.639076+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U2hvcER1bmtAcWlsaW4=" }, { "type": "victim", "value": "KMLS", "context": "qilin — DE — Not Found", "group": "qilin", "country": "DE", "sector": null, "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-20T12:13:43.083355+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/S01MU0BxaWxpbg==" }, { "type": "victim", "value": "Touring Club Suisse", "context": "qilin — CH — Transportation", "group": "qilin", "country": "CH", "sector": "Transportation", "tags": [ "ransomware", "victim", "qilin" ], "seenAt": "2026-09-20T12:13:05.737287+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/VG91cmluZyBDbHViIFN1aXNzZUBxaWxpbg==" }, { "type": "victim", "value": "Studio Notarile Associato Salvatore Costantino E Anna Favarato", "context": "emperador — IT — Professional Services", "group": "emperador", "country": "IT", "sector": "Professional Services", "tags": [ "ransomware", "victim", "emperador" ], "seenAt": "2026-09-20T09:35:30.781513+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/U3R1ZGlvIE5vdGFyaWxlIEFzc29jaWF0byBTYWx2YXRvcmUgQ29zdGFudGlubyBFIEFubmEgRmF2YXJhdG9AZW1wZXJhZG9y" }, { "type": "cve", "value": "CVE-2025-39964", "context": "Linux Kernel — Linux Kernel Race Condition Vulnerability", "vendor": "Linux", "product": "Kernel", "dueDate": "2026-09-21", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-18", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-39964" }, { "type": "cve", "value": "CVE-2026-53266", "context": "Linux Kernel — Linux Kernel Out-of-Bounds Write Vulnerability", "vendor": "Linux", "product": "Kernel", "dueDate": "2026-09-21", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-18", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-53266" }, { "type": "cve", "value": "CVE-2025-39682", "context": "Linux Kernel — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability", "vendor": "Linux", "product": "Kernel", "dueDate": "2026-09-21", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-18", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-39682" }, { "type": "cve", "value": "CVE-2026-58704", "context": "Google Pixel — Google Pixel Improper Authorization Vulnerability", "vendor": "Google", "product": "Pixel", "dueDate": "2026-09-19", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-16", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-58704" }, { "type": "cve", "value": "CVE-2026-76460", "context": "Cisco Identity Services Engine — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability", "vendor": "Cisco", "product": "Identity Services Engine", "dueDate": "2026-09-19", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-16", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-76460" }, { "type": "cve", "value": "CVE-2026-87886", "context": "Acronis Backup — Acronis Backup Incorrect Default Permissions Vulnerability", "vendor": "Acronis", "product": "Backup", "dueDate": "2026-09-19", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-16", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-87886" }, { "type": "cve", "value": "CVE-2026-76461", "context": "Cisco Secure Email Gateway — Cisco Secure Email Gateway SQL Injection Vulnerability", "vendor": "Cisco", "product": "Secure Email Gateway", "dueDate": "2026-09-17", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-14", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-76461" }, { "type": "cve", "value": "CVE-2026-84869", "context": "ConnectWise ScreenConnect — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability", "vendor": "ConnectWise", "product": "ScreenConnect", "dueDate": "2026-09-14", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-11", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-84869" }, { "type": "cve", "value": "CVE-2026-42016", "context": "JFrog Artifactory — JFrog Artifactory Incorrect Authorization Vulnerability", "vendor": "JFrog", "product": "Artifactory", "dueDate": "2026-09-25", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-11", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-42016" }, { "type": "cve", "value": "CVE-2026-42018", "context": "JFrog Artifactory — JFrog Artifactory Improper Authentication Vulnerability", "vendor": "JFrog", "product": "Artifactory", "dueDate": "2026-09-25", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-11", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-42018" }, { "type": "cve", "value": "CVE-2026-85706", "context": "GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "vendor": "GitLab", "product": "Community Edition and Enterprise Edition", "dueDate": "2026-09-14", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-11", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-85706" }, { "type": "cve", "value": "CVE-2026-86060", "context": "MikroTik RouterOS — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "vendor": "MikroTik", "product": "RouterOS", "dueDate": "2026-09-13", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-10", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-86060" }, { "type": "cve", "value": "CVE-2026-67277", "context": "MikroTik RouterOS — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability", "vendor": "MikroTik", "product": "RouterOS", "dueDate": "2026-09-13", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-10", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-67277" }, { "type": "cve", "value": "CVE-2026-19490", "context": "Citrix NetScaler — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability", "vendor": "Citrix", "product": "NetScaler", "dueDate": "2026-09-12", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-09", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19490" }, { "type": "cve", "value": "CVE-2025-25249", "context": "Fortinet Multiple Products — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability", "vendor": "Fortinet", "product": "Multiple Products", "dueDate": "2026-09-12", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-09", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-25249" }, { "type": "cve", "value": "CVE-2026-87491", "context": "Google Chromium V8 — Google Chromium V8 Out of Bounds Write Vulnerability", "vendor": "Google", "product": "Chromium V8", "dueDate": "2026-09-23", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-09", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-87491" }, { "type": "cve", "value": "CVE-2026-20079", "context": "Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability", "vendor": "Cisco", "product": "Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management", "dueDate": "2026-09-12", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-09", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-20079" }, { "type": "cve", "value": "CVE-2026-75650", "context": "Adobe Commerce and Magento — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "vendor": "Adobe", "product": "Commerce and Magento", "dueDate": "2026-09-11", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-08", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-75650" }, { "type": "cve", "value": "CVE-2026-81963", "context": "Microsoft Windows — Microsoft Windows Link Following Vulnerability", "vendor": "Microsoft", "product": "Windows", "dueDate": "2026-09-22", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-08", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-81963" }, { "type": "cve", "value": "CVE-2026-86218", "context": "N-able N-central — N-able N-central Static Code Injection Vulnerability", "vendor": "N-able", "product": "N-central", "dueDate": "2026-09-11", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-08", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-86218" }, { "type": "cve", "value": "CVE-2026-85880", "context": "Microsoft Windows — Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "vendor": "Microsoft", "product": "Windows", "dueDate": "2026-09-22", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-08", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-85880" }, { "type": "cve", "value": "CVE-2026-85046", "context": "Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability", "vendor": "Google", "product": "Chromium V8", "dueDate": "2026-09-18", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-04", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-85046" }, { "type": "cve", "value": "CVE-2026-59822", "context": "BerriAI LiteLLM — BerriAI LiteLLM Improper Authentication Vulnerability", "vendor": "BerriAI", "product": "LiteLLM", "dueDate": "2026-09-16", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-59822" }, { "type": "cve", "value": "CVE-2026-48710", "context": "Kludex Starlette — Kludex Starlette HTTP Request/Response Smuggling Vulnerability", "vendor": "Kludex", "product": "Starlette", "dueDate": "2026-09-16", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710" }, { "type": "cve", "value": "CVE-2026-49869", "context": "Kestra Kestra OSS — Kestra OSS OS Command Injection Vulnerability", "vendor": "Kestra", "product": "Kestra OSS", "dueDate": "2026-09-05", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-49869" }, { "type": "cve", "value": "CVE-2026-82329", "context": "JFrog Artifactory — JFrog Artifactory Improper Authentication Vulnerability", "vendor": "JFrog", "product": "Artifactory", "dueDate": "2026-09-05", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-82329" }, { "type": "cve", "value": "CVE-2026-9586", "context": "Sangoma Switchvox — Sangoma Switchvox SQL Injection Vulnerability", "vendor": "Sangoma", "product": "Switchvox", "dueDate": "2026-09-05", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-9586" }, { "type": "cve", "value": "CVE-2026-83548", "context": "SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "vendor": "SonicWall", "product": "SMA1000 Appliances", "dueDate": "2026-09-05", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-83548" }, { "type": "cve", "value": "CVE-2026-83549", "context": "SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "vendor": "SonicWall", "product": "SMA1000 Appliances", "dueDate": "2026-09-05", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-09-02", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-83549" }, { "type": "cve", "value": "CVE-2026-82078", "context": "PaperCut NG/MF — PaperCut NG/MF Unsafe Reflection Vulnerability", "vendor": "PaperCut", "product": "NG/MF", "dueDate": "2026-09-14", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-31", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-82078" }, { "type": "cve", "value": "CVE-2026-81578", "context": "PaperCut NG/MF — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability", "vendor": "PaperCut", "product": "NG/MF", "dueDate": "2026-09-14", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-31", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-81578" }, { "type": "cve", "value": "CVE-2023-49105", "context": "ownCloud ownCloud — ownCloud Improper Authentication Vulnerability", "vendor": "ownCloud", "product": "ownCloud", "dueDate": "2026-08-30", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-27", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-49105" }, { "type": "cve", "value": "CVE-2026-53362", "context": "Linux Kernel — Linux Kernel Unspecified Vulnerability", "vendor": "Linux", "product": "Kernel", "dueDate": "2026-08-30", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-27", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-53362" }, { "type": "cve", "value": "CVE-2026-66384", "context": "JFrog Artifactory — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability", "vendor": "JFrog", "product": "Artifactory", "dueDate": "2026-09-10", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-27", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-66384" }, { "type": "cve", "value": "CVE-2021-23758", "context": "Ajax.NET Professional Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability", "vendor": "Ajax.NET Professional", "product": "Ajax.NET Professional", "dueDate": "2026-09-09", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-26", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-23758" }, { "type": "cve", "value": "CVE-2015-3246", "context": "Red Hat Libuser — Red Hat Libuser Race Condition Vulnerability", "vendor": "Red Hat", "product": "Libuser", "dueDate": "2026-09-09", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-26", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3246" }, { "type": "cve", "value": "CVE-2015-5287", "context": "Red Hat Automatic Bug Reporting Tool — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability", "vendor": "Red Hat", "product": "Automatic Bug Reporting Tool", "dueDate": "2026-09-09", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-26", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-5287" }, { "type": "cve", "value": "CVE-2022-0995", "context": "Linux Kernel — Linux Kernel Out-of-Bounds Write Vulnerability", "vendor": "Linux", "product": "Kernel", "dueDate": "2026-09-09", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-26", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-0995" }, { "type": "cve", "value": "CVE-2026-8452", "context": "Citrix NetScaler ADC and NetScaler Gateway — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "vendor": "Citrix", "product": "NetScaler ADC and NetScaler Gateway", "dueDate": "2026-08-29", "ransomwareUse": false, "tags": [ "kev", "exploited" ], "seenAt": "2026-08-26", "source": "CISA KEV", "sourceKey": "CISA KEV", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-8452" }, { "type": "ip", "value": "27.133.154.218", "context": "QakBot · offline · port 443 · SAKURA-B SAKURA Internet Inc.", "online": false, "tags": [ "c2", "botnet", "qakbot" ], "seenAt": "2026-03-04 14:28:39", "source": "Feodo Tracker (abuse.ch)", "sourceKey": "Feodo Tracker", "link": "https://feodotracker.abuse.ch/browse/host/27.133.154.218/" }, { "type": "ip", "value": "178.62.3.223", "context": "QakBot · offline · port 443 · DIGITALOCEAN-ASN - DigitalOcean, LLC", "online": false, "tags": [ "c2", "botnet", "qakbot" ], "seenAt": "2026-02-17 05:41:23", "source": "Feodo Tracker (abuse.ch)", "sourceKey": "Feodo Tracker", "link": "https://feodotracker.abuse.ch/browse/host/178.62.3.223/" }, { "type": "victim", "value": "Paylogix", "context": "akira — US — Financial Services", "group": "akira", "country": "US", "sector": "Financial Services", "tags": [ "ransomware", "victim", "akira" ], "seenAt": "2026-01-15T13:48:29.435004+00:00", "source": "ransomware.live", "sourceKey": "ransomware.live", "link": "https://www.ransomware.live/id/UGF5bG9naXhAYWtpcmE=" }, { "type": "ip", "value": "34.204.119.63", "context": "QakBot · offline · port 443 · AMAZON-AES", "online": false, "tags": [ "c2", "botnet", "qakbot" ], "seenAt": "2026-01-13 21:41:15", "source": "Feodo Tracker (abuse.ch)", "sourceKey": "Feodo Tracker", "link": "https://feodotracker.abuse.ch/browse/host/34.204.119.63/" }, { "type": "ip", "value": "50.16.16.211", "context": "QakBot · online · port 443 · AMAZON-AES", "online": true, "tags": [ "c2", "botnet", "qakbot" ], "seenAt": "2025-12-30 13:56:31", "source": "Feodo Tracker (abuse.ch)", "sourceKey": "Feodo Tracker", "link": "https://feodotracker.abuse.ch/browse/host/50.16.16.211/" }, { "type": "ip", "value": "162.243.103.246", "context": "Emotet · offline · port 8080 · DIGITALOCEAN-ASN", "online": false, "tags": [ "c2", "botnet", "emotet" ], "seenAt": "2022-06-04 21:24:53", "source": "Feodo Tracker (abuse.ch)", "sourceKey": "Feodo Tracker", "link": "https://feodotracker.abuse.ch/browse/host/162.243.103.246/" }, { "type": "compromised", "value": "101.47.134.74", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "101.47.152.216", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "101.47.28.226", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "101.91.126.150", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.130.193.150", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.16.48.130", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.203.197.6", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.217.42.136", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.110", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.115", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.124", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.170", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.237", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.38", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.41", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.42", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.160.67", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.161.28", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.161.29", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.161.79", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.161.85", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.220.161.86", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "102.223.209.43", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.10.120.8", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.106.77.178", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.113.153.50", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.118.29.32", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.121.20.18", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.12.205.20", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.139.126.5", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.139.236.70", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.142.240.142", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.144.82.250", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.147.187.182", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.148.79.138", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.153.154.10", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.153.65.59", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.154.137.43", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.154.179.154", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.154.63.88", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.154.81.166", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.162.1.80", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.16.72.118", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.183.5.58", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.188.237.243", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.189.5.190", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.205.107.170", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.207.1.13", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.207.183.95", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.214.100.4", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.216.169.25", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.229.125.91", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.232.25.114", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.234.200.252", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.241.168.70", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.28.37.12", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.28.38.27", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.39.213.200", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.39.93.76", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.47.15.110", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.52.140.67", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.57.64.11", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.63.101.24", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.74.122.88", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.78.2.252", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.79.90.26", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.79.96.91", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.87.16.26", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.90.155.32", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "103.90.25.52", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.155.46.74", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.100.7", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.29.222", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.52.143", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.59.59", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.62.118", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.199.76.244", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "104.248.235.1", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "106.13.120.65", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "107.150.97.10", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "107.189.17.7", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "107.189.24.56", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "108.165.164.23", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "108.175.5.23", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "109.123.227.46", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "109.226.38.244", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "112.94.9.223", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "113.145.249.71", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "113.145.250.146", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "113.199.65.48", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "113.23.225.9", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "114.9.97.2", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "115.114.95.98", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "115.146.121.179", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "115.20.171.54", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.12.40", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.13.177", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.156.150", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.158.67", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.159.84", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.21.251", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.214.220", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.217.246", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.220.232", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.22.151", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.22.34", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.223.50", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.3.154", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.6.69", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.110.9.161", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.74.164.106", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.99.168.171", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "116.99.169.218", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "117.102.101.50", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "117.103.80.168", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "117.2.125.84", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "117.50.195.206", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "118.95.33.69", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "120.138.132.173", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "120.138.171.186", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "120.71.148.144", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "121.134.90.172", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "122.54.197.165", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "123.100.226.79", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "1.231.29.229", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "123.201.92.20", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "123.30.238.247", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "124.174.29.165", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "125.129.127.204", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "125.16.55.214", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "125.39.148.106", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "125.91.106.241", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "1.27.251.252", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "128.14.226.236", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "129.121.128.70", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "129.45.84.193", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.181.21", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.107", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.122", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.144", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.149", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.225", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.227", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.230", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.231", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.12.182.93", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "130.211.109.218", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "133.242.132.48", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "134.122.119.106", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 }, { "type": "compromised", "value": "134.122.126.211", "context": "Known compromised host", "tags": [ "compromised-host" ], "seenAt": null, "source": "Emerging Threats", "sourceKey": "Emerging Threats", "link": null, "totalInFeed": 690 } ] }