CYBERRAKSHAK LABS · DAILY GLOBAL THREAT INTELLIGENCE

GTI Feed — 11 October 2026

Name: CyberRakshakLabs Daily Threat Intelligence Feed — 11 October 2026
Creator: CyberRakshakLabs
Published: 2026-10-11

Daily defensive threat intelligence feed containing 100 source-provided, defanged indicators for 11 October 2026.

Table format: IoC · Severity · Confidence · Involved Threat Type · Malware / Family · Brief Attack Description

IoC	Severity	Confidence	Involved Threat Type	Malware / Family	Brief Attack Description
`97[.]104[.]107[.]190:80`	CRITICAL	100/100	botnet_cc	XWorm	Associated with XWorm command-and-control activity according to the source classification.
`95[.]217[.]135[.]208:8443`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`95[.]217[.]135[.]208:8080`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`95[.]217[.]135[.]208:80`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`95[.]217[.]135[.]208:443`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`95[.]217[.]135[.]208:22`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`95[.]216[.]174[.]89:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`95[.]211[.]44[.]207:2404`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`95[.]182[.]87[.]134:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`95[.]133[.]228[.]51:443`	CRITICAL	100/100	payload_delivery	FakeUpdates / SocGholish	Associated with FakeUpdates/SocGholish payload-delivery activity according to the source classification.
`95[.]129[.]234[.]18:443`	CRITICAL	100/100	payload_delivery	ClickFix	Associated with ClickFix-related payload delivery according to the source classification.
`95[.]102[.]34[.]46:9090`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`94[.]26[.]68[.]68:2404`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`94[.]26[.]248[.]76:443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`94[.]237[.]14[.]115:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`94[.]232[.]46[.]202:4321`	CRITICAL	100/100	botnet_cc	SystemBC	Associated with SystemBC malware command-and-control activity according to the source classification.
`94[.]183[.]235[.]249:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`94[.]183[.]235[.]159:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`94[.]183[.]235[.]142:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`94[.]183[.]235[.]11:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`94[.]156[.]152[.]24:443`	CRITICAL	100/100	payload_delivery	Unknown loader	Associated with unknown_loader activity; source classification: payload_delivery.
`94[.]154[.]43[.]84:9000`	CRITICAL	100/100	payload_delivery	Unspecified	Source classifies this indicator as payload-delivery infrastructure; malware family is unspecified.
`94[.]154[.]43[.]84:8900`	CRITICAL	100/100	payload_delivery	Unspecified	Source classifies this indicator as payload-delivery infrastructure; malware family is unspecified.
`94[.]154[.]43[.]84:7000`	CRITICAL	100/100	payload_delivery	Unspecified	Source classifies this indicator as payload-delivery infrastructure; malware family is unspecified.
`94[.]154[.]43[.]83:8443`	CRITICAL	100/100	botnet_cc	MicroStealer	Associated with MicroStealer activity according to the source classification.
`94[.]154[.]43[.]235:8443`	CRITICAL	100/100	botnet_cc	CECBot Android	Associated with CECBot Android botnet activity according to the source classification.
`94[.]154[.]43[.]235:6969`	CRITICAL	100/100	botnet_cc	CECBot Android	Associated with CECBot Android botnet activity according to the source classification.
`94[.]154[.]43[.]235:443`	CRITICAL	100/100	botnet_cc	CECBot Android	Associated with CECBot Android botnet activity according to the source classification.
`94[.]154[.]43[.]235:10213`	CRITICAL	100/100	botnet_cc	CECBot Android	Associated with CECBot Android botnet activity according to the source classification.
`94[.]154[.]43[.]138:48101`	CRITICAL	100/100	botnet_cc	Mirai family	Associated with Mirai-family botnet activity according to the source classification.
`94[.]154[.]43[.]117:2222`	CRITICAL	100/100	botnet_cc	Unspecified	Source classifies this indicator as botnet command-and-control (C2) infrastructure; malware family is unspecified.
`94[.]154[.]40[.]119:4332`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`94[.]154[.]40[.]108:1413`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`94[.]154[.]40[.]106:1413`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`94[.]143[.]143[.]253:8090`	CRITICAL	100/100	botnet_cc	Unspecified	Associated with DCRat command-and-control activity according to the source classification.
`94[.]139[.]252[.]190:7001`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`93[.]185[.]165[.]94:4380`	CRITICAL	100/100	botnet_cc	QuasarRAT	Associated with QuasarRAT command-and-control activity according to the source classification.
`93[.]185[.]165[.]104:8080`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`93[.]185[.]165[.]104:80`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`93[.]185[.]165[.]104:443`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`93[.]185[.]165[.]104:22`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`93[.]185[.]165[.]104:18963`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`93[.]177[.]77[.]234:8085`	CRITICAL	100/100	botnet_cc	win.vshell	Associated with win.vshell activity; source classification: botnet_cc.
`93[.]152[.]221[.]45:7061`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]45:44308`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]45:37610`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]45:36605`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]232:7061`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]232:36605`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]152[.]221[.]232:32505`	CRITICAL	100/100	botnet_cc	Drifter botnet	Associated with Drifter botnet activity according to the source classification.
`93[.]127[.]131[.]161:80`	CRITICAL	100/100	botnet_cc	AsyncRAT	Associated with AsyncRAT command-and-control activity according to the source classification.
`92[.]242[.]33[.]17:8080`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`92[.]242[.]33[.]17:80`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`92[.]242[.]33[.]17:443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`92[.]24[.]51[.]238:80`	CRITICAL	100/100	botnet_cc	XWorm	Associated with XWorm command-and-control activity according to the source classification.
`92[.]119[.]158[.]39:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`92[.]118[.]230[.]7:443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`92[.]118[.]112[.]61:7193`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`92[.]118[.]112[.]61:27651`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`91[.]92[.]47[.]99:8088`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`91[.]92[.]47[.]99:8080`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`91[.]92[.]47[.]99:80`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`91[.]92[.]47[.]99:22`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`91[.]92[.]41[.]39:2026`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`91[.]92[.]35[.]7:6969`	CRITICAL	100/100	botnet_cc	Bashlite / Gafgyt	Associated with Bashlite/Gafgyt botnet activity according to the source classification.
`91[.]92[.]33[.]76:80`	CRITICAL	100/100	payload_delivery	Unspecified	Associated with js.clearfake activity; source classification: payload_delivery.
`91[.]92[.]243[.]218:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]92[.]243[.]115:8443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`91[.]92[.]242[.]3:7171`	CRITICAL	100/100	botnet_cc	win.vshell	Associated with win.vshell activity; source classification: botnet_cc.
`91[.]92[.]242[.]19:7193`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`91[.]92[.]241[.]149:8808`	CRITICAL	100/100	botnet_cc	AsyncRAT	Associated with AsyncRAT command-and-control activity according to the source classification.
`91[.]92[.]240[.]170:7770`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`91[.]240[.]118[.]10:80`	CRITICAL	100/100	botnet_cc	GCleaner	Associated with GCleaner activity; source also classifies the indicator as a loader.
`91[.]224[.]92[.]203:25001`	CRITICAL	100/100	botnet_cc	Kimwolf Android botnet/proxy	Associated with Kimwolf Android botnet/proxy activity according to the source classification.
`91[.]221[.]191[.]167:6444`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`91[.]221[.]191[.]167:6443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`91[.]219[.]236[.]179:8080`	CRITICAL	100/100	botnet_cc	Unspecified	Source classifies this indicator as botnet command-and-control (C2) infrastructure; malware family is unspecified.
`91[.]202[.]5[.]107:8888`	CRITICAL	100/100	botnet_cc	Unspecified	Source classifies this indicator as botnet command-and-control (C2) infrastructure; malware family is unspecified.
`91[.]202[.]5[.]107:80`	CRITICAL	100/100	botnet_cc	Unspecified	Source classifies this indicator as botnet command-and-control (C2) infrastructure; malware family is unspecified.
`91[.]202[.]5[.]107:22`	CRITICAL	100/100	botnet_cc	Unspecified	Source classifies this indicator as botnet command-and-control (C2) infrastructure; malware family is unspecified.
`91[.]199[.]133[.]239:443`	CRITICAL	100/100	botnet_cc	Cobalt Strike	Associated with Cobalt Strike command-and-control activity according to the source classification.
`91[.]193[.]43[.]38:4748`	CRITICAL	100/100	botnet_cc	QuasarRAT	Associated with QuasarRAT command-and-control activity according to the source classification.
`91[.]142[.]78[.]96:443`	CRITICAL	100/100	botnet_cc	JackSkid	Associated with JackSkid botnet activity according to the source classification.
`91[.]107[.]188[.]73:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]107[.]180[.]11:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]107[.]163[.]163:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]107[.]159[.]216:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]107[.]157[.]201:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`91[.]107[.]150[.]39:443`	CRITICAL	100/100	botnet_cc	Vidar infostealer	Associated with Vidar infostealer command-and-control activity according to the source classification.
`90[.]8[.]202[.]45:5452`	CRITICAL	100/100	botnet_cc	Remcos RAT	Associated with Remcos RAT command-and-control activity according to the source classification.
`89[.]44[.]9[.]164:8080`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]44[.]9[.]164:80`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]44[.]9[.]164:443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]34[.]227[.]72:8080`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]34[.]227[.]72:80`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]34[.]227[.]72:443`	CRITICAL	100/100	botnet_cc	Adaptix	Associated with Adaptix C2 activity according to the source classification.
`89[.]32[.]41[.]59:7193`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`89[.]32[.]41[.]59:15987`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`89[.]32[.]41[.]49:7193`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.
`89[.]32[.]41[.]43:7193`	CRITICAL	100/100	botnet_cc	Potassium botnet	Associated with Potassium botnet activity according to the source classification.

Source: User-provided IOC feed export dated 11 October 2026. Confidence values are source-provided, not independently calculated by CyberRakshakLabs; IOCs are defanged for safe publication. Malware/family labels are mapped from the source activity descriptions and are not independently validated.

← Live GTI Feed GTI Archive →