CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 16 October 2026

Name: CyberRakshakLabs Daily Threat Intelligence Feed — 16 October 2026
Creator: CyberRakshakLabs
Published: 2026-10-16

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 16 October 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`179[.]199[.]199[.]11:8080`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`178[.]16[.]53[.]76:9035`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`43[.]138[.]224[.]194:9999`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`82[.]156[.]127[.]116:8888`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`167[.]99[.]179[.]106:9034`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`164[.]92[.]243[.]20:9034`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`217[.]160[.]53[.]33:6738`	CRITICAL	100/100	botnet_cc	Remus	Associated with Remus activity according to the source classification.
`114[.]66[.]38[.]23:4567`	CRITICAL	100/100	botnet_cc	Meterpreter	Associated with Meterpreter activity according to the source classification.
`155[.]103[.]71[.]231:4041`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`128[.]90[.]113[.]198:3000`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`47[.]236[.]70[.]111:2222`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`45[.]142[.]31[.]186:15987`	CRITICAL	100/100	botnet_cc	Potassium	Associated with Potassium activity according to the source classification.
`147[.]93[.]145[.]60:8887`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`172[.]94[.]125[.]194:2404`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`185[.]174[.]101[.]106:2408`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`31[.]77[.]138[.]220:1616`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`45[.]133[.]174[.]164:36284`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`159[.]75[.]118[.]45:80`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`159[.]75[.]118[.]45:8080`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`159[.]75[.]118[.]45:60000`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`159[.]75[.]118[.]45:443`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`159[.]75[.]118[.]45:22`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`167[.]71[.]59[.]163:8080`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`45[.]61[.]139[.]149:443`	CRITICAL	100/100	payload_delivery	—	Source classification is unknown in the supplied feed.
`62[.]171[.]131[.]66:31337`	CRITICAL	100/100	botnet_cc	Sliver	Associated with Sliver activity according to the source classification.
`46[.]225[.]55[.]187:31337`	CRITICAL	100/100	botnet_cc	Sliver	Associated with Sliver activity according to the source classification.
`195[.]162[.]69[.]212:31337`	CRITICAL	100/100	botnet_cc	Sliver	Associated with Sliver activity according to the source classification.
`103[.]79[.]185[.]72:31337`	CRITICAL	100/100	botnet_cc	Sliver	Associated with Sliver activity according to the source classification.
`103[.]117[.]121[.]229:31337`	CRITICAL	100/100	botnet_cc	Sliver	Associated with Sliver activity according to the source classification.
`31[.]40[.]204[.]69:15606`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`91[.]92[.]41[.]56:2404`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`180[.]93[.]125[.]178:14641`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`103[.]83[.]86[.]72:14647`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`38[.]49[.]209[.]244:2313`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`103[.]83[.]87[.]42:14649`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`31[.]40[.]204[.]69:15607`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`185[.]114[.]206[.]92:58981`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`217[.]217[.]97[.]106:20901`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`128[.]90[.]102[.]118:2015`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`216[.]9[.]224[.]71:6123`	CRITICAL	100/100	botnet_cc	XWorm	Associated with XWorm activity according to the source classification.
`167[.]172[.]79[.]84:8080`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`201[.]79[.]48[.]108:8080`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`47[.]236[.]70[.]111:8443`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`47[.]236[.]70[.]111:8080`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`217[.]60[.]242[.]27:8080`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`172[.]94[.]111[.]164:2404`	CRITICAL	100/100	botnet_cc	Remcos	Associated with Remcos activity according to the source classification.
`102[.]117[.]172[.]235:7443`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`47[.]236[.]70[.]111:60000`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`138[.]68[.]135[.]200:9034`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`203[.]98[.]68[.]25:443`	CRITICAL	90/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike activity according to the source classification.
`188[.]166[.]233[.]108:8080`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`47[.]236[.]70[.]111:80`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`47[.]236[.]70[.]111:22`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`47[.]236[.]70[.]111:443`	CRITICAL	100/100	botnet_cc	—	Source classification is unknown in the supplied feed.
`149[.]104[.]29[.]201:8455`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`102[.]220[.]161[.]63:10213`	CRITICAL	100/100	botnet_cc	CECBot (Android)	Associated with CECBot (Android) activity according to the source classification.
`217[.]60[.]242[.]27:34567`	CRITICAL	100/100	botnet_cc	Aisuru	Associated with Aisuru activity according to the source classification.
`49[.]232[.]90[.]5:1443`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`47[.]84[.]20[.]77:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`175[.]178[.]81[.]236:8084`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`113[.]249[.]105[.]221:10080`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`60[.]204[.]171[.]31:8136`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`43[.]143[.]34[.]190:12345`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`134[.]209[.]214[.]178:10911`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`63[.]141[.]229[.]226:8086`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`63[.]141[.]229[.]227:8086`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`150[.]158[.]102[.]111:8049`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`198[.]44[.]46[.]122:1388`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`106[.]38[.]201[.]15:8121`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`175[.]186[.]0[.]57:8084`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`120[.]48[.]34[.]130:8838`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`49[.]232[.]33[.]62:8084`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`43[.]111[.]235[.]219:16667`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`43[.]111[.]235[.]219:5555`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`113[.]45[.]28[.]96:8878`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`38[.]76[.]191[.]100:8084`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`110[.]40[.]213[.]171:9998`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`36[.]133[.]235[.]214:18088`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`49[.]233[.]122[.]187:33334`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`42[.]193[.]100[.]156:18085`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`38[.]47[.]122[.]87:5432`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`63[.]141[.]229[.]228:8086`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`104[.]194[.]88[.]154:39001`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`198[.]44[.]32[.]14:60010`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`2[.]59[.]132[.]142:5533`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`2[.]59[.]132[.]142:5522`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`2[.]59[.]132[.]142:443`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`134[.]122[.]154[.]247:58084`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`154[.]36[.]183[.]100:15082`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`124[.]221[.]216[.]186:8086`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`43[.]161[.]243[.]73:20091`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`149[.]30[.]232[.]29:8021`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`193[.]112[.]28[.]215:18090`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`67[.]215[.]255[.]41:8080`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`82[.]158[.]89[.]122:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`118[.]195[.]242[.]71:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`170[.]62[.]130[.]154:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`193[.]149[.]190[.]254:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`120[.]27[.]228[.]231:84`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.
`69[.]48[.]228[.]144:80`	CRITICAL	100/100	botnet_cc	VShell	Associated with VShell activity according to the source classification.

Source: User-provided IOC feed export dated 16 October 2026. Confidence values are source-provided, not independently calculated by CyberRakshakLabs; IOCs are defanged for safe publication. Malware/family labels are normalized from source activity names and are not independently validated. First-seen timestamps are preserved in historical data but omitted from this table by design.

← Live GTI Feed GTI Archive →