Record · censys.com

Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

Censys Blog · 6 April 2026 · 22 min read

A post on censys.com, published 6 April 2026, has not been cited by any blog yet (corpus.blog, measured 11 October 2026).

A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.

Read at censys.com Wayback capture

0blogs citing

Citing blogs and links by period
Period	Blogs	Links
All time	0	0
Last 90 days	0	0
Last 30 days	0	0
Last 7 days	0	0

Figures for this page
Words blogs link it with	0
External links	27
Length	4,981

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.virustotal.com/gui/file-analysis/ZjkyMjdkNTFiZDVkYTQ0MjRmNGQ5OTA4MGZlMjEwNjI6MTc3NTY2Mzg4MQ== Who cites this page

virustotal.com

https://hacktricks.wiki/en/network-services-pentesting/6379-pentesting-redis.html

hacktricks.wiki

https://platform.censys.io/hosts/77.110.96.200

platform.censys.io

https://platform.censys.io/search?q=%28host.services.endpoints.http.html_tags+%3D+%22%3Ctitle%3EComfyUI%3C%2Ftitle%3E%22%29+and+not+host.services.labels.value+%3D+%22HONEYPOT%22

platform.censys.io

https://docs.comfy.org/development/core-concepts/custom-nodes

docs.comfy.org

https://labs.snyk.io/resources/hacking-comfyui-through-custom-nodes/

labs.snyk.io

https://github.com/Comfy-Org/ComfyUI/blob/master/server.py Who cites this page

github.com

https://github.com/Vova75Rus/ComfyUI-Shell-Executor Who cites this page

github.com

https://github.com/filliptm/ComfyUI_Fill-Nodes Who cites this page

github.com

https://github.com/filliptm/ComfyUI_Fill-Nodes/blob/f41b1c9c9636b9b26a9c3f22feff94c3715d802e/nodes/utility/FL_Code_Node.py Who cites this page

github.com

https://github.com/seanlynch/srl-nodes Who cites this page

github.com

https://github.com/seanlynch/srl-nodes/blob/803eea5da80647a0f83810a04a693d95ea9d5f29/__init__.py Who cites this page

github.com

https://github.com/ruiqutech/ComfyUI-RuiquNodes Who cites this page

github.com

https://github.com/Comfy-Org/ComfyUI-Manager Who cites this page

github.com

https://github.com/xmrig/xmrig Who cites this page

github.com

https://www.kryptex.com/en/mining-pool

kryptex.com

https://github.com/Lolliedieb/lolMiner-releases Who cites this page

github.com

https://hysteria.network Who cites this page

hysteria.network

https://platform.censys.io/hosts/120.241.40.237

platform.censys.io

https://platform.censys.io/certificates/56f395b720e076c22cac55abe4f26c95702f18cffa9848019e84bb6b0f9e5ff5

platform.censys.io

https://platform.censys.io/hosts/162.243.85.63?at_time=2026-03-30T18%3A04%3A38.809106Z

platform.censys.io

https://platform.censys.io/hosts/3.80.187.132

platform.censys.io

https://www.virustotal.com/gui/file-analysis/YzZiODA4YzY2ZDZlMGU2ZmVjZWFkY2RlNTkxOTM0ZGY6MTc3NDk3OTk4NA== Who cites this page

virustotal.com

https://www.virustotal.com/gui/file/dc232b55329d95fe2a47a8d637b7bffea06f18e3d8332ba94b042b1862213a1d Who cites this page

virustotal.com

https://www.virustotal.com/gui/file-analysis/MjIxZTM2MjhkNTgwNmNlYjdjYzYzNDFkOWI4MGE0YTE6MTc3NDk4MDA1Ng== Who cites this page

virustotal.com

https://www.virustotal.com/gui/file-analysis/MDhhNTBhYzJmNzY5Mjk3ZGVjMmMxNmRhNzVhN2YzNjE6MTc3NDk4MDA4Mw== Who cites this page

virustotal.com

https://www.virustotal.com/gui/file/ecb05ace093a8bf936d0aac66a5b6d0896d21122961a21ebc178f4f3fdff09c6 Who cites this page

virustotal.com

Elsewhere on censys.com (1)

Databases. EXPOSED! (Redis) Read at censys.com

censys.com

Hackers Are Attempting to Turn ComfyUI Servers Into a Cryptomining Proxy Botnet

Cited by

Links from this post

Similar posts