Back Redpacketsecurity

Sliver C2 Detected – 45[.]38[.]20[.]151:31337

Redpacketsecurity •admin • September 12, 2026

The Information provided at the time of posting was detected as “Sliver C2”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security TimeStamp 2026-09-12T16:12:59.152659

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Sliver C2 Instances Detected on Port 31337 On September 12, 2026, RedPacket Security reported the detection of multiple Sliver Command and Control (C2) servers operating on port 31337. The IP addresses identified include 103.227.225.194, 130.94.105.104, 38.76.215.245, 40.90.235.75, 103.253.42.34, 169.58.252.86, 45.38.20.151, 104.253.79.117, 129.226.150.240, and 192.155.92.211. The reports emphasize that the detections may be false positives and urge users to conduct their own validations. The potential impact of these detections is currently unclear, as no specific vulnerabilities or exploitation methods have been confirmed. Security professionals are advised to monitor these IP addresses and assess their network traffic for any unusual activity. The situation remains fluid, with ongoing analysis required to determine the legitimacy of these C2 detections. 10 sources 40

Extracted Entities

IP Addresses (1)

45.38.20.151

Malware (1)

Sliver