CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed — 26 October 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 26 October 2026.
Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
106[.]54[.]1[.]74:8089 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
179[.]199[.]199[.]60:33061 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
8[.]134[.]160[.]8:50002 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
47[.]239[.]212[.]183:8964 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
116[.]62[.]81[.]149:50003 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
45[.]202[.]245[.]70:3232 | Critical | 100/100 | Botnet Cc | Unknown | Source classification: unknown family; threat type is botnet command-and-control. |
217[.]60[.]103[.]135:65000 | Critical | 90/100 | Payload Delivery | Unknown | Source classification: payload delivery; malware family is unknown. |
156[.]254[.]20[.]48:26078 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
47[.]100[.]187[.]173:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
160[.]119[.]66[.]206:56675 | Critical | 100/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
47[.]243[.]109[.]132:5252 | Critical | 100/100 | Botnet Cc | Gh0stRAT | Source classifies this indicator as botnet command-and-control associated with Gh0stRAT activity. |
8[.]148[.]29[.]180:10001 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
123[.]57[.]30[.]209:9998 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
39[.]103[.]98[.]161:8080 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
45[.]192[.]169[.]57:80 | Critical | 100/100 | Botnet Cc | Unknown | Source classification: unknown family; threat type is botnet command-and-control. |
103[.]236[.]85[.]116:8443 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
154[.]94[.]237[.]203:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
43[.]142[.]143[.]95:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
8[.]218[.]8[.]170:443 | Critical | 100/100 | Botnet Cc | ValleyRAT | Source classifies this indicator as botnet command-and-control associated with ValleyRAT activity. |
13[.]202[.]120[.]94:8080 | Critical | 100/100 | Botnet Cc | Adaptix C2 | Source classifies this indicator as botnet command-and-control associated with Adaptix C2 activity. |
198[.]46[.]131[.]230:8085 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
47[.]104[.]30[.]212:10000 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
130[.]94[.]30[.]70:8443 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
47[.]111[.]117[.]176:8003 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
13[.]202[.]120[.]94:80 | Critical | 100/100 | Botnet Cc | Adaptix C2 | Source classifies this indicator as botnet command-and-control associated with Adaptix C2 activity. |
15[.]164[.]241[.]232:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
95[.]111[.]226[.]157:4443 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
47[.]94[.]132[.]198:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
38[.]240[.]48[.]153:6001 | Critical | 100/100 | Botnet Cc | Quasar RAT | Source classifies this indicator as botnet command-and-control associated with Quasar RAT activity. |
103[.]176[.]111[.]176:80 | Critical | 90/100 | Botnet Cc | Prometei | Source classifies this indicator as botnet command-and-control associated with Prometei activity. |
80[.]253[.]249[.]242:443 | Critical | 100/100 | Botnet Cc | Remus | Source classifies this indicator as botnet command-and-control associated with Remus activity. |
84[.]32[.]149[.]191:443 | Critical | 100/100 | Botnet Cc | Remus | Source classifies this indicator as botnet command-and-control associated with Remus activity. |
8[.]156[.]80[.]127:18080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
111[.]230[.]151[.]198:18080 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
123[.]56[.]74[.]141:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
156[.]254[.]20[.]46:26078 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
130[.]94[.]75[.]105:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
161[.]248[.]179[.]115:6868 | Critical | 100/100 | Botnet Cc | NjRAT | Source classifies this indicator as botnet command-and-control associated with NjRAT activity. |
129[.]121[.]115[.]43:8001 | Critical | 90/100 | Botnet Cc | Aisuru | Source classifies this indicator as botnet command-and-control associated with Aisuru activity. |
129[.]121[.]115[.]43:9163 | Critical | 90/100 | Payload Delivery | elf aisuru | Source classifies this indicator as payload delivery associated with elf aisuru activity. |
31[.]77[.]220[.]7:443 | Critical | 100/100 | Botnet Cc | Remus | Source classifies this indicator as botnet command-and-control associated with Remus activity. |
168[.]138[.]40[.]244:31337 | Critical | 100/100 | Botnet Cc | Sliver | Source classifies this indicator as botnet command-and-control associated with Sliver activity. |
185[.]193[.]125[.]201:31337 | Critical | 100/100 | Botnet Cc | Sliver | Source classifies this indicator as botnet command-and-control associated with Sliver activity. |
151[.]245[.]121[.]241:31337 | Critical | 100/100 | Botnet Cc | Sliver | Source classifies this indicator as botnet command-and-control associated with Sliver activity. |
191[.]217[.]203[.]232:25565 | Critical | 100/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
31[.]56[.]209[.]86:9111 | Critical | 90/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
31[.]56[.]209[.]86:443 | Critical | 90/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
31[.]56[.]209[.]86:8443 | Critical | 90/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
31[.]56[.]209[.]86:993 | Critical | 90/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
176[.]65[.]139[.]51:27871 | Critical | 90/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
122[.]51[.]134[.]200:8084 | Critical | 90/100 | Payload Delivery | elf mirai | Source classifies this indicator as payload delivery associated with elf mirai activity. |
94[.]154[.]43[.]68:48101 | Critical | 100/100 | Botnet Cc | Mirai | Source classifies this indicator as botnet command-and-control associated with Mirai activity. |
85[.]11[.]167[.]7:15077 | Critical | 100/100 | Botnet Cc | Unknown | Source classification: unknown family; threat type is botnet command-and-control. |
130[.]94[.]75[.]105:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
130[.]94[.]75[.]105:22 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
130[.]94[.]75[.]105:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
175[.]178[.]126[.]48:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
114[.]215[.]184[.]158:1080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
175[.]178[.]126[.]48:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
175[.]178[.]126[.]48:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
149[.]104[.]31[.]151:22 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
64[.]89[.]161[.]138:8808 | Critical | 100/100 | Botnet Cc | AsyncRAT | Source classifies this indicator as botnet command-and-control associated with AsyncRAT activity. |
149[.]104[.]31[.]151:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
184[.]194[.]188[.]194:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
149[.]104[.]31[.]151:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
149[.]104[.]31[.]151:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
184[.]194[.]188[.]194:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
47[.]95[.]140[.]79:8888 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
8[.]160[.]179[.]57:8081 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
103[.]186[.]85[.]179:8877 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
45[.]192[.]169[.]57:8081 | Critical | 100/100 | Botnet Cc | Unknown | Source classification: unknown family; threat type is botnet command-and-control. |
45[.]192[.]169[.]57:443 | Critical | 100/100 | Botnet Cc | Unknown | Source classification: unknown family; threat type is botnet command-and-control. |
103[.]186[.]85[.]182:8877 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
117[.]72[.]205[.]100:9999 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
96[.]9[.]124[.]130:80 | Critical | 100/100 | Botnet Cc | Adaptix C2 | Source classifies this indicator as botnet command-and-control associated with Adaptix C2 activity. |
96[.]9[.]124[.]130:8080 | Critical | 100/100 | Botnet Cc | Adaptix C2 | Source classifies this indicator as botnet command-and-control associated with Adaptix C2 activity. |
89[.]32[.]41[.]146:23789 | Critical | 100/100 | Botnet Cc | Potassium | Source classifies this indicator as botnet command-and-control associated with Potassium activity. |
203[.]195[.]243[.]103:8084 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
47[.]111[.]117[.]176:8004 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
156[.]240[.]14[.]158:8877 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
38[.]60[.]179[.]108:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
110[.]173[.]53[.]101:80 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
156[.]240[.]14[.]155:8877 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
38[.]60[.]179[.]108:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
18[.]118[.]229[.]48:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
38[.]60[.]179[.]108:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
38[.]60[.]179[.]108:22 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
18[.]118[.]229[.]48:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
18[.]118[.]229[.]48:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
54[.]71[.]81[.]78:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
170[.]231[.]239[.]144:22 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
43[.]142[.]137[.]169:8055 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
54[.]71[.]81[.]78:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
43[.]142[.]137[.]169:7000 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
43[.]142[.]137[.]169:22 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
38[.]60[.]246[.]113:443 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
38[.]60[.]246[.]113:80 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
38[.]60[.]246[.]113:8080 | Critical | 100/100 | Botnet Cc | Cobalt Strike | Source classifies this indicator as botnet command-and-control associated with Cobalt Strike activity. |
156[.]240[.]14[.]154:8877 | Critical | 100/100 | Botnet Cc | VShell | Source classifies this indicator as botnet command-and-control associated with VShell activity. |
103[.]178[.]235[.]51:8808 | Critical | 100/100 | Botnet Cc | AsyncRAT | Source classifies this indicator as botnet command-and-control associated with AsyncRAT activity. |
Source: User-provided IOC feed export dated 26 October 2026. Confidence values (90/100–100/100) are source-provided, not independently calculated; IOCs are defanged for safe publication. Malware-family labels are normalized from source activity tags.
Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.