This report identifies hosts that have the Secure Shell (SSH) service running and accessible on the Internet.

The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS, including two critical ones. The vulnerabilities are already being actively exploited to...

UPDATE: Critical vulnerability in N-able N-central gives attackers unauthenticated, "god-mode" access to the RMM console.

DESCRIPTION LAST UPDATED: 2026-09-11 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

This report is a list of all the websites we (or our collaborative partners) have been able to identify and verify to be compromised.

Development of the Shadowserver Dashboard was funded by the UK FCDO. IoT device fingerprinting statistics and honeypot attack statistics co-financed by the Connecting Europe Facility of the European Union (EU CEF VARIoT project).

DESCRIPTION LAST UPDATED: 2026-09-09 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

This report identifies hosts that have the Secure Shell (SSH) service running and accessible on the Internet.

Short description of what is in the security bulletin

DESCRIPTION LAST UPDATED: 2026-08-31 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

Er zijn meerdere ernstige kwetsbaarheden gevonden in Microsoft Exchange Server. Een van deze kwetsbaarheden is CVE-2026-62911, met een CVSS-score van 8.0. Voor deze kwetsbaarheid is exploitcode online...

Development of the Shadowserver Dashboard was funded by the UK FCDO. IoT device fingerprinting statistics and honeypot attack statistics co-financed by the Connecting Europe Facility of the European Union (EU CEF VARIoT project).

DESCRIPTION LAST UPDATED: 2026-08-26 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

Development of the Shadowserver Dashboard was funded by the UK FCDO. IoT device fingerprinting statistics and honeypot attack statistics co-financed by the Connecting Europe Facility of the European Union (EU CEF VARIoT project).

This report is a list of all the websites we (or our collaborative partners) have been able to identify and verify to be compromised.

DESCRIPTION LAST UPDATED: 2023-12-06 DEFAULT SEVERITY LEVEL: INFO This report contains a list of devices we have identified in our daily Internet scans. The assessment is made based on all our Interne...

DESCRIPTION LAST UPDATED: 2026-08-14 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

DESCRIPTION LAST UPDATED: 2026-08-14 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative so...

本报告由国家互联网应急中心（CNCERT）与奇安信网神信息技术(北京)股份有限公司共同发布 自 2026 年第一季度以来，XLAB持续追踪到一个BOT数量超过20万名为 Dysphoria 的新兴僵尸网络家族。该家族在短短几个月内经历了频繁的变种更新与技术迭代，展现出极强的生命力。其演进路径不仅横跨了 jackskid、fbot变种，更在近期引入了基于区块链 ENS/SNS 域名的 C2 ...

DESCRIPTION LAST UPDATED: 2026-07-23 DEFAULT SEVERITY LEVEL: CRITICAL This report identifies hosts that have the Hypertext Transfer Protocol (HTTP) service running on some port that may have a vulnera...

Shadowserver doesn’t sell data or services. We’re a team of altruists, funded entirely by those who share our vision of a more secure Internet. Join us.

Backblaze is a pioneer in robust, scalable low cost cloud backup and storage services. Enterprise hot storage, low cost backup and archive, and more.

Shadowserver doesn’t sell data or services. We’re a team of altruists, funded entirely by those who share our vision of a more secure Internet. Join us.