Live threat monitoring dashboard: malicious IPs, CVE disclosures, and malware IOCs aggregated in real time.

52
Events indexed today
328
Malicious IPs this week
5
Feeds aggregated
99.98%
Feed sync uptime

Signal log

Live · updated every 10 minutes

CVE watch

source: NVD
  • CVE-2026-116105 LOW

    CVE-2026-116105 published: A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive infor...

    Details →
  • CVE-2026-116104 MEDIUM

    CVE-2026-116104 published: A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of...

    Details →
  • CVE-2026-116103 MEDIUM

    CVE-2026-116103 published: A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads t...

    Details →
  • CVE-2026-116102 MEDIUM

    CVE-2026-116102 published: A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to ...

    Details →
  • CVE-2026-116101 MEDIUM

    CVE-2026-116101 published: A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The...

    Details →

Recent malicious IPs

source: AbuseIPDB · view all →
IPConfidenceLast reported
98.173.235.234 100% 2026-10-27 18:17:01
115.191.18.114 100% 2026-10-27 18:17:01
20.5.85.204 100% 2026-10-27 18:17:01
20.98.137.38 100% 2026-10-27 18:17:01
200.159.0.218 100% 2026-10-27 18:17:00
111.225.214.154 100% 2026-10-27 18:17:00
165.22.51.61 100% 2026-10-27 18:17:00
150.40.126.115 100% 2026-10-27 18:17:00
85.217.140.17 100% 2026-10-27 18:17:00
150.109.16.200 100% 2026-10-27 18:17:00
123.58.198.35 100% 2026-10-27 18:17:00
139.255.254.163 100% 2026-10-27 18:17:00
45.78.204.254 100% 2026-10-27 12:17:02
61.171.36.43 100% 2026-10-27 12:17:01
80.251.156.20 100% 2026-10-27 12:17:01
103.48.192.48 100% 2026-10-27 12:17:01
181.23.57.3 100% 2026-10-27 12:17:01
201.17.133.138 100% 2026-10-27 12:17:00
180.184.141.117 100% 2026-10-27 12:17:00
34.42.41.131 100% 2026-10-27 12:17:00
129.121.140.71 100% 2026-10-27 12:16:59
62.16.41.154 100% 2026-10-27 06:17:01
85.217.149.58 100% 2026-10-27 06:17:01
185.231.32.33 100% 2026-10-27 06:17:01
176.65.132.89 100% 2026-10-27 06:17:01

Malware URLs / IOCs

URLs → · Domains →
  • OTX New OTX pulse: Camera Management Software Compromise Leads to Malware Deployment
  • OTX New OTX pulse: Notorious Brazilian Magecart group hijacks Convertr checkouts via Plausible analytics
  • OTX New OTX pulse: Tricks from the Past deployed via signed ChatGPT and Claude binaries
  • OTX New OTX pulse: PHP2Shell: Exploitation Attempts and Remediation Trends
  • OTX New OTX pulse: Inside ICMacOS: From an Infostealer to a Persistent RAT
  • OTX New OTX pulse: Domain Shadowing: Attackers Abuse Institutional Domains
  • OTX New OTX pulse: PHP2Shell (CVE-2026-109618/9) Havoc: UNC actors leveraging Public Exploit Code Against Public, Business And Educational Infrastructure
  • OTX New OTX pulse: DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
  • OTX New OTX pulse: How VBScript Malware Evades Detection Using Trusted Tools Copy
  • OTX New OTX pulse: Beyond testmetest: Native Addon Camouflage and 42 Armed GitHub Repositories Reveal a Hidden npm Publisher
  • OTX New OTX pulse: Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access
  • OTX New OTX pulse: Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles
  • OTX New OTX pulse: deepveindrilling.com: Magento CMS block loader hits 953 stores
  • OTX New OTX pulse: Suspected DPRK Campaign staging PHP2Shell Targeting against Global PHP infrastructure
  • OTX New OTX pulse: Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
  • TWEETFEED Domain flagged by the community: tchan1.anuj.workers.dev (#malware #phishing)
  • TWEETFEED Domain flagged by the community: t.me.combot.top (#malware #phishing)
  • TWEETFEED Domain flagged by the community: t-me.nproxy.org (#malware #phishing)
  • TWEETFEED Domain flagged by the community: proxy-tg-huafei080.papag8593.workers.dev (#malware #phishing)
  • TWEETFEED Domain flagged by the community: llsbsnls.suplayer810.workers.dev (#malware #phishing)
  • TWEETFEED Domain flagged by the community: linksub-4u1.pages.dev (#malware #phishing)
  • TWEETFEED Domain flagged by the community: hello-world-fancy-mud-57ff.2111857176.workers.dev (#malware #phishing)
  • TWEETFEED Domain flagged by the community: eqvpn.space (#malware #phishing)
  • TWEETFEED Domain flagged by the community: desktop-telergram.org (#malware #phishing)
  • TWEETFEED Domain flagged by the community: cfclear.devdesk.workers.dev (#malware #phishing)