| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 165.245.209.216 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-31 | 2026-09-01 |
| 46.101.160.192 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-31 | 2026-09-01 |
| 178.128.201.199 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-31 | 2026-09-01 |
| 157.245.41.38 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-31 | 2026-09-01 |
| 217.60.195.82 | 2404 | C2 | Remcos | — | — | AE | AS209373 | 2026-08-31 | — |
| 102.220.160.87 | 7009 | C2 | XWorm | — | — | NG | AS197769 | 2026-08-31 | — |
| 137.220.158.91 | 8080 | C2 | Ghost RAT | — | — | SG | AS4907 | 2026-08-31 | — |
| 109.122.18.182 | 50062 | C2 | AsyncRAT | — | — | CZ | AS215286 | 2026-08-31 | — |
| 150.242.246.106 | 8443 | C2 | VShell | — | — | CN | AS134765 | 2026-08-31 | — |
| 101.42.136.73 | 123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 192.253.225.173 | 8888 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-08-31 | — |
| 192.253.225.173 | 6666 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-08-31 | — |
| 103.45.66.18 | 443 | C2 | ValleyRAT | — | — | HK | AS152194 | 2026-08-31 | — |
| 103.45.66.18 | 442 | C2 | ValleyRAT | — | — | HK | AS152194 | 2026-08-31 | — |
| 103.45.66.18 | 441 | C2 | ValleyRAT | — | — | HK | AS152194 | 2026-08-31 | — |
| 8.210.93.39 | 22 | C2 | Ghost RAT | — | — | SG | AS45102 | 2026-08-31 | — |
| 47.83.128.111 | 80 | C2 | Ghost RAT | — | — | US | AS45102 | 2026-08-31 | — |
| 1.117.77.166 | 80 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-31 | — |
| 175.43.223.199 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-08-31 | 2026-09-06 |
| 101.42.136.73 | 4433 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 129.204.11.247 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 142.11.244.124 | 443 | C2 | DanaBot | — | — | US | AS54290 | 2026-08-31 | — |
| 43.129.180.120 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-31 | — |
| 129.204.11.247 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 207.148.64.94 | 8084 | C2 | VShell | — | — | US | AS20473 | 2026-08-31 | — |
| 64.224.17.88 | 2404 | C2 | Remcos | — | — | US | AS399486 | 2026-08-31 | — |
| 106.55.25.253 | 5173 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 106.55.25.253 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 106.55.25.253 | 8090 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | 2026-09-06 |
| 131.226.2.95 | 40038 | C2 | Remcos | — | — | US | AS965 | 2026-08-31 | 2026-09-04 |
| 147.124.223.53 | 2404 | C2 | Remcos | — | — | US | AS396073 | 2026-08-31 | — |
| 106.55.25.253 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 106.55.25.253 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 106.55.25.253 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 192.99.70.186 | 443 | C2 | Evilginx | — | — | CA | AS16276 | 2026-08-31 | 2026-09-06 |
| 144.172.84.7 | 6688 | C2 | ValleyRAT | — | — | US | AS14956 | 2026-08-31 | — |
| 157.254.194.45 | 4321 | C2 | AdaptixC2 | — | — | US | AS399486 | 2026-08-31 | 2026-09-06 |
| 129.80.106.68 | 443 | C2 | Unknown | — | — | US | AS31898 | 2026-08-31 | 2026-09-06 |
| 213.152.162.29 | 13309 | C2 | Remcos | — | — | NL | AS49453 | 2026-08-31 | — |
| 176.65.139.206 | 1999 | C2 | Mirai | — | — | DE | AS219502 | 2026-08-31 | — |
| 154.91.180.246 | 18082 | C2 | VShell | — | — | SC | AS400619 | 2026-08-31 | — |
| 154.91.180.246 | 18080 | C2 | VShell | — | — | SC | AS400619 | 2026-08-31 | — |
| 117.72.202.93 | 8000 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-31 | — |
| 31.76.102.46 | 443 | C2 | Havoc | — | — | US | AS201988 | 2026-08-31 | 2026-09-06 |
| 8.148.26.139 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-08-31 | — |
| 64.89.160.45 | 8443 | C2 | PureLogs Stealer | — | — | US | AS205759 | 2026-08-31 | — |
| 123.253.32.82 | 5025 | C2 | Remcos | — | — | MY | AS55720 | 2026-08-31 | — |
| 92.118.206.129 | 7006 | C2 | XWorm | — | — | DE | AS58087 | 2026-08-31 | — |
| 31.177.110.9 | 443 | C2 | AsyncRAT | — | — | RU | AS56694 | 2026-08-31 | 2026-09-06 |
| 217.60.103.4 | 2404 | C2 | Remcos | — | — | AE | AS209373 | 2026-08-31 | — |