Campaigns / Malware / Family

Potassium

3New IOCs · 24h
30New IOCs · 7 days
54Indicators tracked
1Independent feeds
2026-10-11 14:27Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • IP54
  • C254

Where its infrastructure is hosted

  1. 🇷🇴 Romania11
  2. 🇸🇨 Seychelles6
  3. 🇦🇹 Austria5
  4. 🇲🇰 North Macedonia5
  5. 🇳🇱 Netherlands4
  6. 🇵🇱 Poland3
  7. 🇺🇸 United States3
  8. 🇧🇷 Brazil3
  9. 🇭🇷 Croatia3
  10. 🇸🇪 Sweden2
  11. 🇬🇧 United Kingdom2
  12. 🇫🇷 France2

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-11 14:27IP31.56.19[.]72:15987Botnet C2—
2026-10-11 14:27IP31.56.19[.]73:15987Botnet C2—
2026-10-11 14:27IP31.56.19[.]74:15987Botnet C2—
2026-10-09 22:26IP31.56.19[.]111:7193Botnet C2—
2026-10-07 07:22IP89.32.41[.]43:7193Botnet C2—
2026-10-07 07:22IP31.56.19[.]75:7193Botnet C2—
2026-10-07 06:57IP31.56.19[.]70:7193Botnet C2—
2026-10-07 06:10IP45.95.232[.]146:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]114:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]117:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]128:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]111:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]146:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]108:7193Botnet C2—
2026-10-07 03:45IP89.32.41[.]109:7193Botnet C2—
2026-10-07 03:04IP89.32.41[.]59:7193Botnet C2—
2026-10-07 00:24IP132.243.187[.]133:27651Botnet C2—
2026-10-06 21:19IP89.32.41[.]19:7193Botnet C2—
2026-10-06 16:03IP89.32.41[.]49:7193Botnet C2—
2026-10-06 15:57IP2.59.163[.]77:32876Botnet C2—
2026-10-06 15:17IP91.92.242[.]19:7193Botnet C2—
2026-10-06 15:00IP155.2.192[.]88:7193Botnet C2—
2026-10-06 15:00IP51.89.199[.]102:7193Botnet C2—
2026-10-06 07:44IP138.124.67[.]60:15987Botnet C2—
2026-10-06 07:44IP138.124.67[.]244:32876Botnet C2—
2026-10-06 07:44IP145.249.109[.]10:15987Botnet C2—
2026-10-06 07:44IP45.95.233[.]131:38429Botnet C2—
2026-10-06 05:28IP138.124.67[.]16:23789Botnet C2—
2026-10-06 05:28IP62.133.62[.]30:15987Botnet C2—
2026-10-06 05:28IP89.185.84[.]98:27651Botnet C2—
2026-10-05 06:15IP147.45.116[.]130:15987Botnet C2—
2026-10-04 06:54IP132.243.187[.]112:7193Botnet C2—
2026-10-04 06:54IP2.59.163[.]183:7193Botnet C2—
2026-10-04 06:54IP2.59.163[.]4:7193Botnet C2—
2026-10-04 06:54IP45.155.68[.]31:7193Botnet C2—
2026-10-04 06:54IP5.181.2[.]8:7193Botnet C2—
2026-10-04 06:54IP87.251.69[.]139:7193Botnet C2—
2026-10-04 06:54IP87.251.69[.]166:7193Botnet C2—
2026-10-04 06:54IP89.185.82[.]70:7193Botnet C2—
2026-10-04 06:54IP89.185.82[.]69:7193Botnet C2—
2026-10-04 06:54IP92.118.112[.]61:7193Botnet C2—
2026-10-02 20:44IP147.45.116[.]124:7193Botnet C2—
2026-10-02 20:44IP147.45.116[.]125:7193Botnet C2—
2026-10-02 20:44IP78.153.155[.]29:7193Botnet C2—
2026-10-02 20:44IP89.23.113[.]104:7193Botnet C2—
2026-10-02 13:55IP87.251.69[.]144:7193Botnet C2—
2026-10-02 13:55IP87.251.69[.]145:7193Botnet C2—
2026-10-02 13:55IP87.251.69[.]165:7193Botnet C2—
2026-10-02 11:31IP212.192.14[.]31:27651Botnet C2—
2026-10-02 06:30IP5.181.2[.]75:15987Botnet C2—
2026-09-26 06:20IP5.181.2[.]159:7193Botnet C2—
2026-09-26 06:20IP89.185.82[.]37:7193Botnet C2—
2026-09-26 06:20IP89.185.82[.]38:7193Botnet C2—
2026-09-26 06:20IP89.185.82[.]39:7193Botnet C2—

Defanged for safety. URL query strings removed.