CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 23 October 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 23 October 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
| 130[.]12[.]46[.]145:46787 | Critical | 100/100 | Botnet / C2 | elf.mirai | Associated with elf.mirai activity; source classification: botnet_cc. |
| 64[.]204[.]180[.]86:443 | Critical | 100/100 | Payload Delivery | Unknown Stealer | Source classifies this indicator as unknown stealer activity. |
| 23[.]94[.]252[.]153:80 | Critical | 100/100 | Payload Delivery | Unknown RAT | Source classifies this indicator as unknown RAT activity. |
| 156[.]240[.]41[.]199:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]2:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]194:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]174:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]165:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]167:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]156:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]122:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]14:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 203[.]195[.]243[.]103:80 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]121:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]103:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]106:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]12:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 206[.]123[.]137[.]134:56090 | Critical | 100/100 | Botnet / C2 | win.remcos | Associated with win.remcos activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]73:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]76:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]64:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]7:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]56:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]33:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]30:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 123[.]123[.]74[.]83:8085 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 103[.]242[.]12[.]143:10100 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 43[.]136[.]40[.]48:80 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 39[.]106[.]251[.]194:20000 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 64[.]176[.]37[.]39:8084 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]116:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 47[.]98[.]207[.]191:20000 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]80:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 192[.]144[.]168[.]105:8443 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]53:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 124[.]220[.]22[.]82:8084 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 94[.]156[.]152[.]7:2404 | Critical | 100/100 | Botnet / C2 | win.remcos | Associated with win.remcos activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]45:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]46:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]25:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]236:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]119:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]163:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]209:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 154[.]217[.]248[.]116:18084 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 103[.]39[.]79[.]102:18080 | Critical | 100/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 124[.]71[.]65[.]203:8443 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 116[.]62[.]174[.]16:5432 | Critical | 100/100 | Botnet / C2 | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: botnet_cc. |
| 193[.]161[.]193[.]99:44589 | Critical | 100/100 | Botnet / C2 | win.quasar_rat | Associated with win.quasar_rat activity; source classification: botnet_cc. |
| 139[.]196[.]107[.]4:8090 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 139[.]196[.]107[.]4:8084 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 47[.]95[.]31[.]143:8082 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 38[.]55[.]252[.]139:9443 | Critical | 100/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 47[.]95[.]31[.]143:8083 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 45[.]142[.]141[.]139:8080 | Critical | 100/100 | Botnet / C2 | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: botnet_cc. |
| 217[.]60[.]242[.]27:52869 | Critical | 100/100 | Botnet / C2 | elf.aisuru | Associated with elf.aisuru activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]98:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]99:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]75:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 156[.]240[.]41[.]91:8877 | Critical | 100/100 | Botnet / C2 | win.vshell | Associated with win.vshell activity; source classification: botnet_cc. |
| 193[.]148[.]56[.]77:8093 | Critical | 100/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 89[.]167[.]19[.]6:8080 | Critical | 100/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 167[.]235[.]158[.]200:5920 | Critical | 100/100 | Botnet / C2 | Unknown Stealer | Source classifies this indicator as unknown stealer activity. |
| 176[.]65[.]144[.]99:443 | Critical | 100/100 | Botnet / C2 | Unknown Stealer | Source classifies this indicator as unknown stealer activity. |
| 194[.]87[.]219[.]118:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 194[.]87[.]219[.]118:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 194[.]87[.]219[.]118:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 194[.]87[.]219[.]118:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 194[.]87[.]219[.]118:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]89[.]63[.]173:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]89[.]63[.]173:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]89[.]63[.]173:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]89[.]63[.]173:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]89[.]63[.]173:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]95[.]2[.]245:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]95[.]2[.]245:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]95[.]2[.]245:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]95[.]2[.]245:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 45[.]95[.]2[.]245:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 141[.]98[.]165[.]30:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 141[.]98[.]165[.]30:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 141[.]98[.]165[.]30:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 141[.]98[.]165[.]30:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 141[.]98[.]165[.]30:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]188:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]188:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]188:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]188:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]188:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]172:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]172:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]172:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]172:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 144[.]172[.]103[.]172:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 209[.]200[.]246[.]18:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 209[.]200[.]246[.]18:44831 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 209[.]200[.]246[.]18:49343 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 209[.]200[.]246[.]18:53827 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 209[.]200[.]246[.]18:57409 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
| 145[.]223[.]69[.]163:40517 | Critical | 90/100 | Botnet / C2 | Unknown | Source classification: unknown. |
Source: User-provided IOC feed export dated 23 October 2026. Confidence values (90/100–100/100) are source-provided, not independently calculated; IOCs are defanged for safe publication. Malware-family labels are normalized from source activity tags.