Resultados

2 casos · pág. 1/1

greynoise.io · há 1d medium

GreyNoise: 242,666 Unverified Hong Kong Scanning IPs Surge in a Week While UCLOUD (AS135377) Drives Real Multi-Protocol Scanning

Between March 12 and 18, 2026, the GreyNoise Observation Grid (GOG) recorded 242,666 new scanning IPs geolocating to Hong Kong, 48.9% of all new scanning IPs seen that week. 99.7% never completed a TCP handshake, so GreyNoise classes them as "spoofable" (unverified source addresses). They carried no payloads and triggered no signatures. G…

f5.com · há 1d exploit público high

F5 Labs: SparkRAT C2 scanning from DigitalOcean and April 2025 CVE exploitation trends, including Fortinet SSL-VPN and SAP NetWeaver

F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…

CVE-2017-9841 CVE-2019-9082 CVE-2022-24847 Patchwork BianLian