Hunt 2.6 Adds IP Risk and Reputation Data and Expands IOC Hunting

Summary

Hunt 2.6 adds IP risk and reputation details, expands IOC Hunter sources and C2 infrastructure data, and updates its API, integrations, search, and investigation features.

Key points

• IP details now include risk and reputation information such as scanned C2, TOR nodes, VPN detections, malicious open directories, and related IOCs.
• IOC Hunter adds hundreds of sources, including content from X, and now covers millions of articles.
• The platform added newly identified C2 infrastructure to its dataset, including GobRat, Myth Stealer, and ValleyRat.
• IP search now displays PTR records, and five new data pivots support further exploration and SQL-based searches.
• The API now supports direct SQL result downloads in CSV, JSON, or NDJSON formats.
• The release also updates OpenCTI integration and HuntSQL query handling, and fixes issues in AttackCapture and other platform features.

Threat Actors

Vendors

Products

Related Articles

• Hunt 2.0 Adds Threat-Actor IOC Data, C2 Feeds, and Analysis FeaturesAttackCapture · HuntSQL · OpenCTI
• Hunt.io Recaps 2025 Threat-Hunting Platform Updates and ResearchAttackCapture · HuntSQL
• Hunt 2.5 Adds Threat-Intelligence Pivots and a Downloadable Phishing FeedAttackCapture · HuntSQL
• Hunt 2.4 Adds Phishing Kit Details and Expanded Threat-Hunting SearchAttackCapture · HuntSQL
• Hunt 2.3 Adds Phishing Investigation, IOC Enrichment and SAML SSOAttackCapture · HuntSQL