Critical (open)
1
High (open)
53
Medium (open)
15
Rules Active
27
Alerts
| Severity | Alert | Indicator | When | Status | |
|---|---|---|---|---|---|
| HIGH | New ransomware indicator | 98c5a03dab9fe378a3ff0781de063c1f3309d82c3f480e43de2a9c6396232d2a OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 43.248.108.228/31 OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5b17eaaf-783c-4624-b5f4-42d5950d210f.json OSINT |
1d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5adeed17-3124-41c1-91b9-4a97950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5abc9cfc-4f24-40a6-b7e1-4870950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-24893 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2021-22555 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2017-1000353 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-4008 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 357e03114cb093f5d2bdf6b8bbf5642f16b31ce3f038de9750fd1885017d1fae OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-62221 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 177.44.71.90/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a4c9373-2444-4737-b608-4993950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a5deec2-afe0-4036-a218-49c3950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a26b911-af14-4c92-86a9-446c950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a37c286-b27c-49e7-8c79-ed2e950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a54ca42-e9a0-4d71-a9e6-4f9b950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a281c67-886c-4e97-a972-eca7950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a339ef9-a768-4af7-88b3-7f21950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2026-21514 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-40551 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 115.178.75.242/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 121.131.220.152/30 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 122.187.230.12/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 142.44.233.134/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 173.239.216.16/28 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 3f1764cbc27b9b115fdfef43aa81141778c9e615e89e649bf40f06948aee3860 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 64ec212e9b41ca2052d648971f5b48df9e68fccd25516effe4991d1f6e3aa417 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a0f0f64-4be0-4b9f-b6e3-5e08950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a0066bf-f9bc-478a-afee-4410950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a0451b3-211c-45f2-ac24-403d950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a0451dc-4468-4b5a-9175-473a950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New APT / nation-state indicator | 5a3b6be0-1924-4671-8829-d895950d210f.json OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-54068 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2026-20963 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2026-3910 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2017-7921 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2026-21385 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2025-49113 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2021-22175 OSINT |
3d ago | OPEN | Ack +Case |
| MEDIUM | High threat score (>=0.9) | CVE-2026-20700 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | fd7dfe7054722dfce7e0dc25fa11a4f0073f141ec9a491bebe7c376ad35b5973 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 62e57257872186746eced78016a33422861411c8e8524999ab81560c3ab194bc OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 2ae13d3bccd8230e9a629b9d60e63df05c609d5a515778f5733e85bc97819f8a OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 3753235605d2c1723305dd5993fdd3e0b398872b3368681dab709f1f21827394 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | fd00296c0f5280410b912a84543774eceea507f3c2c179373eed5d7073d43ddf OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 19ae883b20586133a6e5040e4c2d38d127837a4c453d374999e3cf36fb1b4f0c OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 2228798b37e17ba1e867d1955c345111623153e6d7199537a44668b24277ec85 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | f4846096a61652f3be181b8b36de6498484eed26c937e52bede20c480d4290b2 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 05f1ca47f69b8db50a0d0be86309a906af0772d8d44b1d7ed5376ed7eafded0e OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | fa1e0bb9d478c6ffeb6338d3f85ec8ac04db3fe4ed1c6797b79cc16c965d1975 OSINT |
3d ago | OPEN | Ack +Case |
| CRITICAL | New sanctioned indicator | tornado.cash OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 84.233.195.156/30 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 92.118.39.202/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 92.118.39.204/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 94.16.17.140/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 95.141.17.0/24 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 103.183.62.0/30 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 104.234.53.12/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 108.62.56.0/21 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 109.70.100.14/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 110.25.110.134/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 110.34.30.120/30 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 111.70.23.230/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 111.70.32.52/31 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | High corroboration (5+ sources) | 113.212.69.0/24 OSINT |
3d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | d54c5eff8f2bf196a9b51cf6d944475af7d9c42eabc02a472435dcfecb983c6b OSINT |
6d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | 7c4d1a0f009b5073f509a863d1e49dded565dbf59a4987b4b13e0d3beb437210 OSINT |
6d ago | OPEN | Ack +Case |
| HIGH | New ransomware indicator | ececabeca9b82879da14a71588d52e5ca6637acf18fe41ef962044eddd8ff83c OSINT |
6d ago | OPEN | Ack +Case |
Alert Rules
| Rule | Type | Threshold | Severity | Last Run | Status |
|---|---|---|---|---|---|
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| Country risk CRITICAL (>=66) | country_risk |
66 | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| New sanctioned indicator | sanctioned |
— | CRITICAL | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| Country risk rising (+5) | country_risk_move |
5 | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| High corroboration (5+ sources) | corroboration |
5 | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| New ransomware indicator | category_ransomware |
— | HIGH | 1d ago | ENABLED |
| New APT / nation-state indicator | category_apt |
— | HIGH | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
| High threat score (>=0.9) | threat_score |
90 | MEDIUM | 1d ago | ENABLED |
Schedule "Run Alert Rules" via cron for continuous alerting (add alerts.php?generate=1 logic to cron.php).
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
⚙ Automation
Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php