Opencandy
1New IOCs · 24h
42New IOCs · 7 days
42Indicators tracked
1Independent feeds
2026-10-12 04:00Last activity
New indicators per day
2026-09-29 to 2026-10-12, by first report.
- Hash15
- IP27
- Malware42
Where its infrastructure is hosted
Latest indicators
Filter the live feed →| First seen | Type | Indicator | Role | Where |
|---|---|---|---|---|
| 2026-10-12 04:00 | SHA256 | 310dccf6b01883b71462cf9acbfa28e1ff26ccf0be608d0d12f94e4be490e092 | Malware sample | — |
| 2026-10-11 00:59 | IP | 20.42.65[.]90 | Contacted by malware | — |
| 2026-10-10 12:40 | SHA256 | aebed3102186906003d2d9c56fbed174ea0a5af531e41c8fe78613fd23a6e2da | Malware sample | — |
| 2026-10-09 15:02 | SHA256 | 49504f3b985aeaff04be3a6b33dfcf8e4d15ac7e2b16252a40581c6e917e8d24 | Malware sample | — |
| 2026-10-09 15:02 | IP | 95.68.60[.]130 | Contacted by malware | — |
| 2026-10-09 15:02 | IP | 80.94.76[.]5 | Contacted by malware | — |
| 2026-10-09 14:42 | IP | 138.199.40[.]185 | Contacted by malware | — |
| 2026-10-09 14:24 | SHA256 | 002ae64402fed8b9fa4e03335e75e661bf125f31dfc2a12b4311d780307dd04d | Malware sample | — |
| 2026-10-09 14:24 | SHA256 | 02a69c4bad4af355f29abe3ae6e615e3493b81d0f10d74e460446d4b11718da9 | Malware sample | — |
| 2026-10-09 14:24 | SHA256 | 31d70d1f2661d2c261022ea62ca5fbc96d3860efd9c31409a9cf406f16058fde | Malware sample | — |
| 2026-10-09 14:24 | IP | 134.195.198[.]230 | Contacted by malware | — |
| 2026-10-09 14:24 | IP | 95.216.96[.]160 | Contacted by malware | — |
| 2026-10-09 14:24 | IP | 23.158.56[.]120 | Contacted by malware | — |
| 2026-10-09 14:24 | IP | 142.202.48[.]88 | Contacted by malware | — |
| 2026-10-09 14:06 | SHA256 | 11daf2a4c81416930323a2450630a9e532d7a47c33bf14705fa2a598486aed07 | Malware sample | — |
| 2026-10-09 14:06 | SHA256 | 1faa7c9dbc2d91db188cc65de7d60281f8efa25831c56b62ce49014796c710de | Malware sample | — |
| 2026-10-09 14:06 | IP | 51.91.124[.]225 | Contacted by malware | — |
| 2026-10-09 14:06 | IP | 202.14.122[.]179 | Contacted by malware | — |
| 2026-10-09 14:06 | IP | 45.139.215[.]181 | Contacted by malware | — |
| 2026-10-09 14:06 | IP | 37.48.70[.]156 | Contacted by malware | — |
| 2026-10-09 14:06 | IP | 143.244.38[.]137 | Contacted by malware | — |
| 2026-10-09 13:45 | SHA256 | 2d637e6f0316174faf5e683b68e1a1c389a825c2e220f40806f1da70af1569c3 | Malware sample | — |
| 2026-10-09 13:45 | IP | 88.191.249[.]182 | Contacted by malware | — |
| 2026-10-09 13:45 | IP | 46.232.211[.]130 | Contacted by malware | — |
| 2026-10-09 13:45 | IP | 95.79.202[.]15 | Contacted by malware | — |
| 2026-10-09 13:21 | SHA256 | 058bb82795bc6f621393afc71f1c8b3bcbd7ac8409edff68a2a77fc506e03e35 | Malware sample | — |
| 2026-10-09 13:21 | SHA256 | 0847fcfd0b05793896a15a48951a13d3953c42000832d5fa307b25b30a295928 | Malware sample | — |
| 2026-10-09 13:21 | IP | 202.126.91[.]189 | Contacted by malware | — |
| 2026-10-09 13:21 | IP | 42.112.20[.]235 | Contacted by malware | — |
| 2026-10-09 13:21 | IP | 213.152.161[.]118 | Contacted by malware | — |
| 2026-10-09 12:54 | SHA256 | 00064f1ac6dcb25e69ac272b5188b0a282cbbe50e93685792dc2ae997f8289ff | Malware sample | — |
| 2026-10-09 12:54 | SHA256 | 0520bb5fda7e7fdaf0d5ac419496b2f784a5d823b8b05c45f0ea583fbc0d3cd5 | Malware sample | — |
| 2026-10-09 12:54 | IP | 120.29.77[.]90 | Contacted by malware | — |
| 2026-10-09 12:54 | IP | 91.196.55[.]129 | Contacted by malware | — |
| 2026-10-09 12:54 | IP | 94.140.5[.]61 | Contacted by malware | — |
| 2026-10-09 12:54 | IP | 115.164.119[.]129 | Contacted by malware | — |
| 2026-10-09 12:54 | IP | 185.15.62[.]125 | Contacted by malware | — |
| 2026-10-09 12:54 | IP | 177.128.83[.]80 | Contacted by malware | — |
| 2026-10-09 12:25 | SHA256 | 014142f1cbd93c4d1b7cef0b11f343fb6c01e390674a53fdc19377b2a1ac80c3 | Malware sample | — |
| 2026-10-09 12:25 | SHA256 | 01ce7cb4bb444c8f698aca0dd4cc1573d9e707535b19e45886efe6b1293a7a78 | Malware sample | — |
| 2026-10-09 12:25 | IP | 104.254.90[.]251 | Contacted by malware | — |
| 2026-10-09 12:25 | IP | 143.244.38[.]130 | Contacted by malware | — |
Defanged for safety. URL query strings removed.