| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 62.238.106.96 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-20 | — |
| 62.238.98.35 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-20 | — |
| 43.226.40.204 | 9443 | C2 | VShell | — | — | CN | AS134762 | 2026-08-20 | — |
| 116.205.106.137 | 9997 | C2 | VShell | — | — | CN | AS55990 | 2026-08-20 | — |
| 43.134.42.247 | 443 | C2 | Havoc | — | — | SG | AS132203 | 2026-08-20 | 2026-08-26 |
| 43.134.42.247 | 22 | C2 | Havoc | — | — | SG | AS132203 | 2026-08-20 | — |
| 103.185.249.199 | 5003 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 169.58.75.138 | 8000 | C2 | Unknown | — | — | DE | AS51167 | 2026-08-20 | — |
| 124.221.146.23 | 8000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-20 | 2026-08-21 |
| 199.187.25.93 | 8080 | C2 | Cobalt Strike | — | — | US | AS55933 | 2026-08-20 | 2026-08-22 |
| 217.60.102.8 | 2269 | C2 | Remcos | — | — | AE | AS209373 | 2026-08-20 | — |
| 195.177.94.61 | 2404 | C2 | Remcos | — | — | UA | AS214961 | 2026-08-20 | — |
| 89.106.83.41 | 55550 | C2 | Remcos | — | — | DE | AS200051 | 2026-08-20 | — |
| 46.151.182.93 | 9090 | C2 | Remcos | — | — | NL | AS205759 | 2026-08-20 | — |
| 38.240.40.231 | 2404 | C2 | Remcos | — | — | US | AS931 | 2026-08-20 | — |
| 194.59.31.98 | 2021 | C2 | XWorm | — | — | BG | AS399486 | 2026-08-20 | — |
| 169.58.169.10 | 7004 | C2 | XWorm | — | — | DE | AS51167 | 2026-08-20 | — |
| 151.243.109.130 | 9239 | C2 | Remcos | — | — | AE | AS209274 | 2026-08-20 | — |
| 15.204.115.143 | 7004 | C2 | XWorm | — | — | US | AS16276 | 2026-08-20 | — |
| 4.193.136.143 | 3389 | C2 | Havoc | — | — | US | AS8075 | 2026-08-20 | — |
| 4.193.136.143 | 80 | C2 | Havoc | — | — | US | AS8075 | 2026-08-20 | 2026-08-26 |
| 4.193.136.143 | 22 | C2 | Havoc | — | — | US | AS8075 | 2026-08-20 | — |
| 103.185.249.199 | 8081 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | 2026-08-26 |
| 185.212.44.47 | 1010 | C2 | Unknown | — | — | DE | AS39378 | 2026-08-20 | — |
| 46.151.182.148 | 8080 | C2 | Remcos | — | — | NL | AS205759 | 2026-08-20 | — |
| 64.89.160.142 | 80 | C2 | Socks5Systemz | — | — | US | AS205759 | 2026-08-20 | — |
| 94.26.38.24 | 2024 | C2 | Socks5Systemz | — | — | BG | AS202412 | 2026-08-20 | — |
| 94.183.186.100 | 2024 | C2 | Socks5Systemz | — | — | AE | AS56971 | 2026-08-20 | 2026-08-20 |
| 69.33.213.199 | 6621 | C2 | Mirai | — | — | US | AS154107 | 2026-08-20 | — |
| 103.185.249.199 | 1080 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 103.185.249.199 | 8080 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 103.185.249.199 | 80 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 103.185.249.199 | 443 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 103.185.249.199 | 22 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-08-20 | — |
| 91.215.85.6 | 56003 | C2 | PureRAT | — | — | RU | AS200593 | 2026-08-20 | — |
| 91.215.85.6 | 56002 | C2 | PureRAT | — | — | RU | AS200593 | 2026-08-20 | — |
| 91.215.85.6 | 56001 | C2 | PureRAT | — | — | RU | AS200593 | 2026-08-20 | — |
| 167.17.76.105 | 56003 | C2 | PureRAT | — | — | US | AS400304 | 2026-08-20 | — |
| 167.17.76.105 | 56002 | C2 | PureRAT | — | — | US | AS400304 | 2026-08-20 | — |
| 167.17.76.105 | 56001 | C2 | PureRAT | — | — | US | AS400304 | 2026-08-20 | — |
| 46.246.84.10 | 7045 | C2 | Vjw0rm | — | — | SE | AS42708 | 2026-08-20 | — |
| 134.209.211.37 | 56003 | C2 | PureRAT | — | — | US | AS14061 | 2026-08-20 | — |
| 134.209.211.37 | 56002 | C2 | PureRAT | — | — | US | AS14061 | 2026-08-20 | — |
| 134.209.211.37 | 56001 | C2 | PureRAT | — | — | US | AS14061 | 2026-08-20 | — |
| 15.235.174.203 | 56003 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |
| 15.235.174.203 | 56002 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |
| 15.235.174.203 | 56001 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |
| 15.235.176.216 | 56003 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |
| 15.235.176.216 | 56002 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |
| 15.235.176.216 | 56001 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-20 | — |