CYBERRAKSHAK LABS ยท DAILY GLOBAL THREAT INTELLIGENCE
GTI Feed โ 4 October 2026
Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 4 October 2026.
Table format: IoC ยท Severity ยท Confidence ยท Involved Threat Type ยท Malware / Family ยท Brief Attack Description
| IoC | Severity | Confidence | Involved Threat Type | Malware / Family | Brief Attack Description |
|---|---|---|---|---|---|
| 1[.]12[.]59[.]176:22 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:443 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:80 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:8006 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:8088 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]12[.]59[.]176:81 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 1[.]13[.]196[.]199:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]14[.]100[.]25:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]14[.]100[.]25:8089 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]14[.]100[.]25:8888 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]14[.]120[.]4:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]14[.]76[.]115:9999 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]94[.]129[.]250:8098 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]94[.]219[.]96:53231 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 1[.]95[.]137[.]66:19999 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 101[.]201[.]109[.]2:443 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]201[.]109[.]2:80 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]201[.]109[.]2:8080 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:22 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:443 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:50050 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:80 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]34[.]208[.]175:8081 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:22 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:443 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:80 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:8081 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]217[.]145:8888 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]35[.]40[.]11:443 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]35[.]40[.]11:80 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]35[.]40[.]11:8080 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]42[.]186[.]233:8091 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 101[.]42[.]186[.]233:8092 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 101[.]42[.]255[.]92:443 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:123 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:22 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:443 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:80 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]31[.]60:8082 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]53[.]103:9123 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]43[.]53[.]103:9405 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 101[.]99[.]91[.]180:80 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 102[.]117[.]165[.]210:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]167[.]58:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]169[.]159:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]169[.]96:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]170[.]218:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]172[.]204:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]117[.]173[.]122:7443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 102[.]129[.]165[.]178:8443 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 102[.]134[.]34[.]85:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 102[.]220[.]160[.]122:80 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 102[.]220[.]160[.]198:5555 | CRITICAL | 100/100 | ip:port | win.asyncrat | Associated with win.asyncrat activity; source classification: ip:port. |
| 102[.]220[.]160[.]40:445 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 102[.]220[.]161[.]94:80 | CRITICAL | 100/100 | ip:port | win.asyncrat | Associated with win.asyncrat activity; source classification: ip:port. |
| 102[.]220[.]163[.]160:10213 | CRITICAL | 100/100 | ip:port | apk.cecbot | Associated with apk.cecbot activity; source classification: ip:port. |
| 102[.]220[.]163[.]36:443 | CRITICAL | 100/100 | ip:port | win.asyncrat | Associated with win.asyncrat activity; source classification: ip:port. |
| 102[.]220[.]163[.]36:8808 | CRITICAL | 100/100 | ip:port | win.asyncrat | Associated with win.asyncrat activity; source classification: ip:port. |
| 102[.]220[.]163[.]40:2404 | CRITICAL | 100/100 | ip:port | win.remcos | Associated with win.remcos activity; source classification: ip:port. |
| 102[.]220[.]88[.]241:4444 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 102[.]220[.]88[.]241:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 102[.]53[.]134[.]202:5000 | CRITICAL | 100/100 | ip:port | win.asyncrat | Associated with win.asyncrat activity; source classification: ip:port. |
| 103[.]101[.]85[.]1:4747 | CRITICAL | 100/100 | ip:port | win.quasar_rat | Associated with win.quasar_rat activity; source classification: ip:port. |
| 103[.]106[.]230[.]190:2053 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 103[.]106[.]230[.]190:8443 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 103[.]115[.]49[.]124:8083 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]115[.]49[.]68:22 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]115[.]49[.]68:3232 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]115[.]49[.]68:4993 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]115[.]49[.]68:8000 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]115[.]49[.]68:8090 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]115[.]49[.]68:8888 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]117[.]137[.]230:9999 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]124[.]101[.]68:80 | CRITICAL | 100/100 | ip:port | win.ghost_rat | Associated with win.ghost_rat activity; source classification: ip:port. |
| 103[.]124[.]157[.]49:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]140[.]186[.]26:21290 | CRITICAL | 100/100 | ip:port | win.remcos | Associated with win.remcos activity; source classification: ip:port. |
| 103[.]148[.]58[.]43:34567 | CRITICAL | 100/100 | ip:port | elf.aisuru | Associated with elf.aisuru activity; source classification: ip:port. |
| 103[.]148[.]58[.]43:8001 | CRITICAL | 100/100 | ip:port | elf.aisuru | Associated with elf.aisuru activity; source classification: ip:port. |
| 103[.]148[.]58[.]43:8080 | CRITICAL | 100/100 | ip:port | elf.aisuru | Associated with elf.aisuru activity; source classification: ip:port. |
| 103[.]148[.]58[.]43:8443 | CRITICAL | 100/100 | ip:port | elf.aisuru | Associated with elf.aisuru activity; source classification: ip:port. |
| 103[.]148[.]58[.]43:9034 | CRITICAL | 100/100 | ip:port | elf.aisuru | Associated with elf.aisuru activity; source classification: ip:port. |
| 103[.]163[.]47[.]202:8443 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]199[.]102[.]34:444 | CRITICAL | 100/100 | ip:port | win.valley_rat | Associated with win.valley_rat activity; source classification: ip:port. |
| 103[.]212[.]186[.]12:80 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]212[.]186[.]12:8085 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]212[.]186[.]151:80 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]212[.]186[.]151:8085 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
| 103[.]212[.]186[.]85:22 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]212[.]186[.]85:443 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]212[.]186[.]85:80 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]212[.]186[.]85:8080 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]212[.]186[.]85:888 | CRITICAL | 100/100 | ip:port | win.cobalt_strike | Associated with win.cobalt_strike activity; source classification: ip:port. |
| 103[.]236[.]60[.]111:2053 | CRITICAL | 100/100 | ip:port | win.adaptix_c2 | Associated with win.adaptix_c2 activity; source classification: ip:port. |
| 103[.]236[.]69[.]102:60000 | CRITICAL | 100/100 | ip:port | apk.viper_rat | Associated with apk.viper_rat activity; source classification: ip:port. |
| 103[.]244[.]227[.]157:443 | CRITICAL | 100/100 | ip:port | โ | Source classification: ip:port. |
| 103[.]36[.]223[.]45:8084 | CRITICAL | 100/100 | ip:port | win.vshell | Associated with win.vshell activity; source classification: ip:port. |
Source: User-provided IOC feed export dated 26 September 2026. The supplied feed identifies the 100 values as source-provided confidence; IOCs are defanged for safe publication.