Critical (open)
0
High (open)
64
Medium (open)
6
Rules Active
32
Alerts
| Severity | Alert | Indicator | When | Status | |
|---|---|---|---|---|---|
| HIGH | New APT / nation-state indicator | 58d3f093-d6f4-44d1-93ac-3449950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | bb2eaf4002ec2249f1a7830d7e9b645117cd3bee0663ce23f56299912871e52c OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 079cd439d12f6125b01b1f60d422ff044f114ebc6f040c8967df8599caa2b871 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 2863cfe2fbb518d5320095748b59702a246865ffe31d19e0ae813efff68f30e1 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 3b6dc2bd02a229bb7ab1498b6bcac618dc267fac2f13288c5f15bbda95b9371b OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 9a064ae0d209efad07f5bb893429fe7f13045e8cd41e5a95e62dfd5835ba1b3a OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | f750c3177f49ef28d34597b6f15c363e218deb7619290fb9ebe28bfb04f00293 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57d15dca-ccd0-4e18-b2c5-e6b5950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57dab16c-f32c-4634-b9f1-1b70950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2017-11317 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.156.233.49 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.196.163.237 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.206.104.26 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.210.45.226 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.242.105.70 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 104.22.17.126/31 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 104.22.20.202 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 104.22.20.234 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | cb69bdc2a335443078092efc9cd9d13caad367738fc707fcaa733e4a1305017f OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | e5310e68a619e241f52b637f0e36014fec66d36fc2b44f6b902450efc5b7fbb1 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 9c397806f8ba8e5f2b65ae2641c8bf8c500d57b65ac2e5d3fcd93ba5f99f18c9 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 3aabb91943f632403651e1987094241be03192ee0bb42ebab80f29107b8bef7e OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 8d75ba0a84cb76a542e3deb12bacfb158df9ae89a4a802a7af8c04e5ec443fe1 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 6f7d7bafe999e0b67a29001ea65fb061ae4db0ef202c55ec3a3a133ce79100d8 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57b5a32c-b744-4674-b727-4cb2950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57b3273b-7588-4042-9276-4eb4950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57bd7251-390c-4ee2-accd-4f69950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57bea9ac-bb00-4243-be64-bbe9950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2022-20821 OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2019-18426 OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2022-26904 OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2021-41357 OSINT |
1d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2007-3010 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | a80202ae952953ab8ff42280bcdd87d91f6d573f51e3996369c66bb08c3ec26e OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 9c78e87df1a43fcf604466bdc59a4588da74be29a70c4556a3de7fecc5744c28 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 3Lp1NkJHYsmFRBfM3ggoWsS1PF5hXxrwrD OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 8f43ba681ae86b67cfebad89739528950cec9ccdc13140b5ddcf952a434915de OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 9115c9d9bffe0e937cadec6326862d732359198b643d7807cc96ea079eba58e8 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57a8931f-6818-42e8-81a2-44ec950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57a33020-bc70-4f69-96f9-118b950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57a88345-5254-4c97-954d-4ff8950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 57aaeefd-0bd4-4a41-87ad-4e17950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 93.114.192.168 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 93.180.199.43 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.25.170.239 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.25.175.30 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.25.175.121 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.156.112.44 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.172.9.129 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.199.108.210 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.46.56.83 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.46.120.87 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.162.242.121 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.174.117.4 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.193.39.153 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.203.52.164 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.214.103.111 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 96.8.186.180 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 96.27.234.99 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 96.250.224.172 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 96.253.118.88 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 98.26.144.82 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 98.159.36.10/31 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 98.159.36.16/31 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 98.159.44.92 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 98.240.143.104 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 99.122.69.243 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 99.162.208.47 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.127.170.134/31 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.127.170.138/31 OSINT |
1d ago | OPEN | Ack +Case |
Alert Rules
| Rule | Type | Threshold | Severity | Last Run | Status |
|---|---|---|---|---|---|
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| Country risk CRITICAL (>=66) | country_risk |
66 | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | Never | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | Never | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | Never | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | Never | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| Country risk rising (+5) | country_risk_move |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | Never | ENABLED |
Schedule "Run Alert Rules" via cron for continuous alerting (add alerts.php?generate=1 logic to cron.php).
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
⚙ Automation
Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php