CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 1 November 2026

Name: CyberRakshakLabs Daily Threat Intelligence Feed — 1 November 2026
Creator: CyberRakshakLabs
Published: 2026-11-01
License: https://cyberrakshaklabs.in/gti/license/

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 1 November 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`43[.]133[.]248[.]198:8888`	Critical	100	botnet_cc	unknown	Source classification: unknown; source threat type is botnet_cc.
`38[.]76[.]190[.]209:8443`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`43[.]133[.]248[.]198:80`	Critical	100	botnet_cc	unknown	Source classification: unknown; source threat type is botnet_cc.
`47[.]109[.]109[.]168:3333`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`43[.]133[.]248[.]198:22`	Critical	100	botnet_cc	unknown	Source classification: unknown; source threat type is botnet_cc.
`185[.]173[.]36[.]87:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`185[.]173[.]38[.]165:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`185[.]173[.]39[.]100:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`77[.]232[.]36[.]162:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`124[.]222[.]141[.]204:8089`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`121[.]43[.]158[.]195:8084`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`38[.]47[.]106[.]103:8081`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`1[.]15[.]65[.]4:1521`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`166[.]88[.]100[.]135:80`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`111[.]170[.]148[.]141:808`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`111[.]170[.]148[.]141:2222`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`154[.]91[.]49[.]187:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`64[.]118[.]128[.]131:9000`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`47[.]100[.]183[.]95:10010`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]184:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`49[.]234[.]181[.]30:22`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`122[.]51[.]179[.]8:7500`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`102[.]134[.]35[.]205:8080`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`102[.]134[.]35[.]205:49666`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`102[.]134[.]35[.]205:443`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`154[.]91[.]48[.]165:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`102[.]134[.]35[.]205:22`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`106[.]54[.]41[.]209:21117`	Critical	100	botnet_cc	unknown	Source classification: unknown; source threat type is botnet_cc.
`154[.]91[.]48[.]164:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]188:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]185:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]186:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]182:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]183:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]179:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]181:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]177:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]178:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]189:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]165:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]166:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]162:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]163:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]164:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]190:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]173:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]174:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]188:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]172:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]169:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`89[.]248[.]65[.]59:1337`	Critical	100	payload_delivery	elf.mirai	Source classifies this indicator as payload delivery associated with mirai activity.
`156[.]234[.]7[.]71:443`	Critical	100	botnet_cc	unknown_loader	Source classifies this indicator as unknown loader activity.
`154[.]91[.]54[.]186:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]187:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]185:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]177:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]184:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`203[.]91[.]75[.]211:443`	Critical	100	botnet_cc	win.valley_rat	Source classifies this indicator as botnet cc associated with valley_rat activity.
`108[.]187[.]43[.]110:80`	Critical	100	botnet_cc	win.valley_rat	Source classifies this indicator as botnet cc associated with valley_rat activity.
`202[.]61[.]160[.]233:443`	Critical	100	botnet_cc	win.valley_rat	Source classifies this indicator as botnet cc associated with valley_rat activity.
`156[.]247[.]40[.]170:1218`	Critical	100	botnet_cc	win.valley_rat	Source classifies this indicator as botnet cc associated with valley_rat activity.
`156[.]234[.]7[.]14:8001`	Critical	100	botnet_cc	win.valley_rat	Source classifies this indicator as botnet cc associated with valley_rat activity.
`196[.]251[.]122[.]91:27016`	Critical	100	botnet_cc	win.remcos	Source classifies this indicator as botnet cc associated with remcos activity.
`154[.]91[.]54[.]180:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]168:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]178:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]179:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]167:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]172:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]174:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]164:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]166:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]179:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]180:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]55[.]189:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`47[.]97[.]243[.]66:8888`	Critical	100	botnet_cc	win.cobalt_strike	Source classifies this indicator as botnet cc associated with cobalt_strike activity.
`104[.]64[.]43[.]105:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`172[.]233[.]108[.]128:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`172[.]233[.]108[.]189:443`	Critical	100	botnet_cc	elf.jackskid	Source classifies this indicator as botnet cc associated with jackskid activity.
`154[.]91[.]54[.]171:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]162:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]54[.]170:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]190:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]189:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]187:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]188:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]177:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]178:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]53[.]186:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]174:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]175:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]171:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]172:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`154[.]91[.]52[.]173:9097`	Critical	100	botnet_cc	win.vshell	Source classifies this indicator as botnet cc associated with vshell activity.
`95[.]164[.]53[.]45:80`	Critical	100	botnet_cc	win.smartloader	Source classifies this indicator as botnet cc associated with smartloader activity.
`91[.]188[.]254[.]62:80`	Critical	100	payload_delivery	elf.xmrig	Source classifies this indicator as payload delivery associated with xmrig activity.
`85[.]11[.]167[.]7:11941`	Critical	100	payload_delivery	elf.xmrig	Source classifies this indicator as payload delivery associated with xmrig activity.
`85[.]11[.]167[.]7:11973`	Critical	100	payload_delivery	elf.xmrig	Source classifies this indicator as payload delivery associated with xmrig activity.
`176[.]65[.]149[.]174:34843`	Critical	100	payload_delivery	elf.xmrig	Source classifies this indicator as payload delivery associated with xmrig activity.
`193[.]233[.]16[.]35:80`	Critical	100	botnet_cc	win.smartloader	Source classifies this indicator as botnet cc associated with smartloader activity.

Source: User-provided IOC feed export dated 1 November 2026. Confidence values (90/100–100/100) are source-provided, not independently calculated; IOCs are defanged for safe publication. Malware-family labels are normalized from source activity tags.

← Live GTI Feed GTI Archive →

Threat Score values are source-provided confidence values, not independently calculated by CyberRakshakLabs. Indicators are defanged for safe publication.