| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 163.8.216.219 | 7800 | C2 | ValleyRAT | — | — | AU | AS153656 | 2026-09-02 | — |
| 163.8.216.219 | 7811 | C2 | ValleyRAT | — | — | AU | AS153656 | 2026-09-02 | — |
| 172.111.163.170 | 65070 | C2 | Remcos | — | — | US | AS9009 | 2026-09-02 | 2026-09-07 |
| 13.213.72.36 | 44321 | C2 | VShell | — | — | US | AS16509 | 2026-09-02 | — |
| 115.29.162.68 | 9999 | C2 | VShell | — | — | CN | AS37963 | 2026-09-02 | — |
| 106.14.36.132 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-02 | — |
| 101.132.153.5 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-02 | — |
| 45.221.118.38 | 80 | C2 | Cobalt Strike | — | — | ZA | AS55933 | 2026-09-02 | — |
| 45.221.118.38 | 443 | C2 | Cobalt Strike | — | — | ZA | AS55933 | 2026-09-02 | — |
| 102.220.160.198 | 2027 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-01 | 2026-09-07 |
| 2.91.182.143 | 443 | C2 | Havoc | — | — | SA | AS25019 | 2026-09-01 | 2026-09-07 |
| 39.102.57.23 | 5555 | C2 | VShell | — | — | CN | AS37963 | 2026-09-01 | — |
| 106.14.155.244 | 8080 | C2 | VShell | — | — | CN | AS37963 | 2026-09-01 | — |
| 195.177.94.101 | 995 | C2 | AsyncRAT | — | — | UA | AS214961 | 2026-09-01 | 2026-09-07 |
| 196.64.147.116 | 8808 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-09-01 | — |
| 1.117.77.166 | 8080 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-01 | — |
| 94.250.178.40 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-09-01 | 2026-09-07 |
| 91.92.47.214 | 443 | C2 | PureRAT | — | — | BG | AS197170 | 2026-09-01 | 2026-09-07 |
| 91.92.47.203 | 56001 | C2 | PureRAT | — | — | BG | AS197170 | 2026-09-01 | 2026-09-07 |
| 80.190.77.86 | 1001 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-09-01 | 2026-09-07 |
| 77.83.39.141 | 56001 | C2 | PureRAT | — | — | UA | AS51396 | 2026-09-01 | 2026-09-07 |
| 64.227.59.213 | 65000 | C2 | Unknown | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 64.225.112.113 | 65000 | C2 | Unknown | — | — | US | AS14061 | 2026-09-01 | 2026-09-07 |
| 46.246.12.27 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-09-01 | 2026-09-07 |
| 31.76.125.10 | 443 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-01 | 2026-09-07 |
| 207.56.7.53 | 8848 | C2 | DCRat | — | — | US | AS54801 | 2026-09-01 | 2026-09-07 |
| 207.56.7.37 | 8848 | C2 | DCRat | — | — | US | AS54801 | 2026-09-01 | 2026-09-07 |
| 196.64.147.116 | 5001 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-09-01 | 2026-09-07 |
| 196.64.147.116 | 5000 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-09-01 | 2026-09-07 |
| 196.251.121.124 | 2008 | C2 | PureRAT | — | — | SC | AS205759 | 2026-09-01 | 2026-09-07 |
| 195.20.115.166 | 52203 | C2 | AsyncRAT | — | — | HU | AS56322 | 2026-09-01 | 2026-09-07 |
| 195.20.115.166 | 52202 | C2 | AsyncRAT | — | — | HU | AS56322 | 2026-09-01 | 2026-09-07 |
| 195.177.94.188 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-01 | 2026-09-07 |
| 195.177.94.101 | 88 | C2 | AsyncRAT | — | — | UA | AS214961 | 2026-09-01 | 2026-09-07 |
| 194.9.6.35 | 56001 | C2 | PureRAT | — | — | DE | AS58212 | 2026-09-01 | 2026-09-07 |
| 192.253.226.78 | 56002 | C2 | PureRAT | — | — | US | AS152194 | 2026-09-01 | 2026-09-07 |
| 192.253.226.78 | 56001 | C2 | PureRAT | — | — | US | AS152194 | 2026-09-01 | 2026-09-07 |
| 158.62.198.77 | 7443 | C2 | Unknown | — | — | US | AS394177 | 2026-09-01 | 2026-09-07 |
| 144.31.6.6 | 56003 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-01 | 2026-09-07 |
| 144.31.6.0 | 56003 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-01 | 2026-09-07 |
| 108.59.244.106 | 443 | C2 | PureRAT | — | — | US | AS14315 | 2026-09-01 | 2026-09-07 |
| 102.220.160.198 | 8808 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-01 | 2026-09-07 |
| 1.117.77.166 | 88 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-01 | — |
| 114.66.27.110 | 8080 | C2 | Cobalt Strike | — | — | CN | AS136188 | 2026-09-01 | — |
| 114.66.27.110 | 80 | C2 | Cobalt Strike | — | — | CN | AS136188 | 2026-09-01 | — |
| 114.66.27.110 | 443 | C2 | Cobalt Strike | — | — | CN | AS136188 | 2026-09-01 | — |
| 114.66.27.110 | 8088 | C2 | Cobalt Strike | — | — | CN | AS136188 | 2026-09-01 | 2026-09-07 |
| 134.122.168.166 | 8848 | C2 | DCRat | — | — | SG | AS152194 | 2026-09-01 | — |
| 107.174.14.102 | 8080 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-09-01 | — |
| 107.174.14.102 | 80 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-09-01 | — |