| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 38.60.227.139 | 8801 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-06 | — |
| 38.60.227.139 | 22 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-06 | — |
| 38.60.227.139 | 443 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-06 | — |
| 193.161.193.99 | 56776 | C2 | Quasar RAT | — | — | RU | AS198134 | 2026-09-05 | — |
| 38.60.227.139 | 8080 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-05 | — |
| 38.60.227.139 | 80 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-05 | — |
| 223.109.142.7 | 8080 | C2 | Cobalt Strike | — | — | CN | AS56046 | 2026-09-05 | — |
| 223.109.142.7 | 80 | C2 | Cobalt Strike | — | — | CN | AS56046 | 2026-09-05 | — |
| 223.109.142.7 | 443 | C2 | Cobalt Strike | — | — | CN | AS56046 | 2026-09-05 | — |
| 192.252.179.24 | 65530 | C2 | Cobalt Strike | — | — | US | AS152194 | 2026-09-05 | — |
| 111.231.116.164 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 111.231.116.164 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 111.231.116.164 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 111.231.116.164 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 39.104.48.247 | 9999 | C2 | VShell | — | — | CN | AS37963 | 2026-09-05 | — |
| 165.99.43.101 | 3262 | C2 | Cobalt Strike | — | — | CN | AS401701 | 2026-09-05 | — |
| 165.99.43.101 | 55555 | C2 | Cobalt Strike | — | — | CN | AS401701 | 2026-09-05 | — |
| 165.99.43.101 | 7777 | C2 | Cobalt Strike | — | — | CN | AS401701 | 2026-09-05 | — |
| 94.154.32.101 | 443 | C2 | pupy | — | — | UA | AS214961 | 2026-09-05 | 2026-09-12 |
| 83.136.211.230 | 56001 | C2 | PureRAT | — | — | FR | AS400897 | 2026-09-05 | 2026-09-12 |
| 45.81.115.197 | 8848 | C2 | DCRat | — | — | UA | AS205463 | 2026-09-05 | 2026-09-12 |
| 45.225.135.90 | 56003 | C2 | PureRAT | — | — | PA | AS64107 | 2026-09-05 | 2026-09-12 |
| 45.139.104.226 | 443 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-05 | 2026-09-12 |
| 45.11.230.111 | 56002 | C2 | PureRAT | — | — | DE | AS152586 | 2026-09-05 | 2026-09-12 |
| 45.11.230.111 | 56001 | C2 | PureRAT | — | — | DE | AS152586 | 2026-09-05 | 2026-09-12 |
| 31.70.81.171 | 7707 | C2 | AsyncRAT | — | — | DE | AS8560 | 2026-09-05 | 2026-09-12 |
| 31.59.118.107 | 8848 | C2 | DCRat | — | — | AE | AS152586 | 2026-09-05 | 2026-09-12 |
| 196.81.251.114 | 5001 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-09-05 | 2026-09-12 |
| 195.66.213.23 | 443 | C2 | Tsundere | — | — | UA | AS43641 | 2026-09-05 | 2026-09-12 |
| 185.212.128.233 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-09-05 | 2026-09-12 |
| 185.157.46.242 | 1337 | C2 | AsyncRAT | — | — | RS | AS15924 | 2026-09-05 | 2026-09-12 |
| 183.90.187.73 | 443 | C2 | PureRAT | — | — | MY | AS400619 | 2026-09-05 | 2026-09-12 |
| 173.249.197.20 | 56003 | C2 | PureRAT | — | — | US | AS11878 | 2026-09-05 | 2026-09-12 |
| 160.191.88.70 | 44556 | C2 | AsyncRAT | — | — | VN | AS151858 | 2026-09-05 | 2026-09-12 |
| 15.168.12.234 | 7443 | C2 | Unknown | — | — | US | AS16509 | 2026-09-05 | 2026-09-12 |
| 136.118.7.65 | 9000 | C2 | Evilginx | — | — | US | AS396982 | 2026-09-05 | 2026-09-12 |
| 102.220.160.198 | 56002 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-05 | 2026-09-12 |
| 102.117.165.66 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-05 | 2026-09-12 |
| 117.72.200.129 | 18084 | C2 | VShell | — | — | CN | AS141679 | 2026-09-05 | — |
| 111.170.148.132 | 5674 | C2 | Unknown | — | — | CN | AS151185 | 2026-09-05 | — |
| 58.181.61.142 | 7746 | C2 | Ghost RAT | — | — | KR | AS17877 | 2026-09-05 | — |
| 23.88.7.15 | 6271 | C2 | Remus | — | — | DE | AS24940 | 2026-09-05 | 2026-09-09 |
| 182.254.162.240 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-05 | — |
| 211.101.233.147 | 8080 | C2 | VShell | — | — | CN | AS58519 | 2026-09-05 | — |
| 49.232.166.123 | 8888 | C2 | VShell | — | — | CN | AS45090 | 2026-09-05 | — |
| 124.222.57.34 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 124.222.57.34 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 124.222.57.34 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | — |
| 47.97.199.23 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-05 | — |
| 154.91.56.125 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |