| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.12.182.201 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-09-09 | 2026-09-14 |
| 102.220.161.73 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-09 | — |
| 95.211.120.98 | 7004 | C2 | XWorm | — | — | NL | AS60781 | 2026-09-09 | — |
| 104.168.7.212 | 7004 | C2 | XWorm | — | — | US | AS36352 | 2026-09-09 | — |
| 152.32.133.192 | 80 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 15.235.204.60 | 7443 | C2 | Unknown | — | — | CA | AS16276 | 2026-09-09 | 2026-09-15 |
| 122.51.112.96 | 5555 | C2 | DCRat | — | — | CN | AS45090 | 2026-09-09 | — |
| 155.103.71.126 | 4142 | C2 | Remcos | — | — | US | AS44382 | 2026-09-09 | 2026-09-11 |
| 2.58.56.41 | 4411 | C2 | Remcos | — | — | DE | AS210558 | 2026-09-09 | 2026-09-10 |
| 178.104.123.110 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 2.28.118.174 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 157.180.91.189 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | — |
| 178.104.112.1 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 178.104.112.188 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 2.29.17.179 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 2.29.23.78 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 2.29.22.60 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 178.104.118.80 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 178.104.123.239 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-09 | 2026-09-14 |
| 54.95.7.136 | 8888 | C2 | Unknown | — | — | US | AS16509 | 2026-09-09 | — |
| 54.95.7.136 | 80 | C2 | Unknown | — | — | US | AS16509 | 2026-09-09 | — |
| 54.95.7.136 | 22 | C2 | Unknown | — | — | US | AS16509 | 2026-09-09 | — |
| 188.166.83.118 | 80 | C2 | AMOS | — | — | US | AS14061 | 2026-09-09 | 2026-09-13 |
| 31.13.190.58 | 9559 | C2 | Remcos | — | — | RO | AS9009 | 2026-09-09 | 2026-09-13 |
| 109.107.168.27 | 8080 | C2 | Unknown | — | — | RU | AS200823 | 2026-09-09 | — |
| 31.13.190.58 | 32635 | C2 | Remcos | — | — | RO | AS9009 | 2026-09-09 | 2026-09-13 |
| 93.127.160.86 | 9559 | C2 | Remcos | — | — | DE | AS47447 | 2026-09-09 | 2026-09-15 |
| 31.13.190.58 | 9441 | C2 | Remcos | — | — | RO | AS9009 | 2026-09-09 | 2026-09-12 |
| 31.13.190.58 | 9442 | C2 | Remcos | — | — | RO | AS9009 | 2026-09-09 | 2026-09-13 |
| 155.103.71.126 | 4141 | C2 | Remcos | — | — | US | AS44382 | 2026-09-09 | 2026-09-10 |
| 172.105.183.165 | 12345 | Payload | Unknown | — | — | US | AS63949 | 2026-09-09 | — |
| 152.136.253.101 | 111 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-09 | — |
| 120.77.254.122 | 8888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-09 | — |
| 120.77.254.122 | 7500 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-09 | — |
| 120.77.254.122 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-09 | — |
| 20.118.221.53 | 8080 | C2 | AdaptixC2 | — | — | US | AS8075 | 2026-09-09 | — |
| 20.118.221.53 | 80 | C2 | AdaptixC2 | — | — | US | AS8075 | 2026-09-09 | — |
| 20.118.221.53 | 443 | C2 | AdaptixC2 | — | — | US | AS8075 | 2026-09-09 | — |
| 111.230.151.240 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-09 | — |
| 103.244.227.157 | 443 | C2 | Unknown | — | — | NZ | AS16276 | 2026-09-09 | — |
| 152.136.253.101 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-09 | 2026-09-15 |
| 5.206.227.107 | 111 | C2 | Cobalt Strike | — | — | PT | AS47674 | 2026-09-09 | — |
| 185.19.40.22 | 4411 | C2 | Remcos | — | — | NL | AS210558 | 2026-09-09 | — |
| 139.59.168.101 | 8443 | C2 | Aisuru | — | — | SG | AS14061 | 2026-09-09 | 2026-09-15 |
| 209.38.225.90 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-09 | 2026-09-15 |
| 64.225.102.231 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-09 | 2026-09-15 |
| 5.206.227.107 | 5198 | C2 | Cobalt Strike | — | — | PT | AS47674 | 2026-09-09 | — |
| 5.206.227.107 | 8080 | C2 | Cobalt Strike | — | — | PT | AS47674 | 2026-09-09 | — |
| 5.206.227.107 | 80 | C2 | Cobalt Strike | — | — | PT | AS47674 | 2026-09-09 | — |
| 5.206.227.107 | 443 | C2 | Cobalt Strike | — | — | PT | AS47674 | 2026-09-09 | — |