[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEG4OSg9bViFW4tP2OlnrdA7CJfq3WfG_fPR_DbmWk7k":3},{"article":4,"iocs":30,"watch_terms":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":18,"category":19,"article_tags":22},"9e94b0b5-c5ba-424a-9417-1864d3459851","@sicehice #AsyncRAT 📡\n\nAsyncRAT botnet C2s:\n81.163.111.127:9001 🇷🇺\n91.242.179.62:8808 🇷🇺\n91....","sicehice-asyncrat-asyncrat-botnet-c2s-81-163-111-127-9001-91-242-179-62-8808-91-d85bf5","@sicehice #AsyncRAT 📡\n\nAsyncRAT botnet C2s:\n81.163.111.127:9001 🇷🇺\n91.242.179.62:8808 🇷🇺\n91.242.179.84:8808 🇷🇺\n91.242.179.84:9001 🇷🇺\n\n👉 https:\u002F\u002Ft.co\u002FoPqnwLfZFP https:\u002F\u002Ft.co\u002Fod4xxLjpAI","Security researcher @sicehice has identified four command-and-control (C2) servers associated with the AsyncRAT botnet, all hosted on Russian IP addresses. The IOCs include IP:port combinations across the 81.163.111.127 and 91.242.179.x ranges. This disclosure provides actionable intelligence for detection and blocking of AsyncRAT infrastructure.","AsyncRAT botnet C2 servers identified across Russian IP infrastructure.",null,"https:\u002F\u002Fx.com\u002Fabuse_ch\u002Fstatus\u002F2044139113830351011","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHF49hsUXMAAYPIM.jpg","2026-04-14T19:41:57+00:00","2026-04-14T20:00:10.930715+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":18,"icon":11,"name":20,"slug":21},"Malware","malware",[23,25],{"category":24},{"id":18,"icon":11,"name":20,"slug":21},{"category":26},{"id":27,"icon":11,"name":28,"slug":29},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[31,35,38,41],{"type":32,"value":33,"context":34},"ip","81.163.111.127","AsyncRAT C2 server on port 9001",{"type":32,"value":36,"context":37},"91.242.179.62","AsyncRAT C2 server on port 8808",{"type":32,"value":39,"context":40},"91.242.179.84","AsyncRAT C2 server on ports 8808 and 9001",{"type":21,"value":42,"context":43},"AsyncRAT","Remote access trojan botnet",[]]