| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 154.36.188.124 | 7070 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 154.36.188.124 | 20 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 154.36.188.124 | 8080 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 82.158.89.252 | 7891 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 82.158.89.252 | 809 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 82.158.89.252 | 9178 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 108.187.43.208 | 443 | C2 | ValleyRAT | — | — | US | AS138995 | 2026-09-28 | — |
| 77.37.41.59 | 9173 | C2 | Remus | — | — | DE | AS47583 | 2026-09-28 | — |
| 108.187.43.208 | 449 | C2 | ValleyRAT | — | — | US | AS138995 | 2026-09-28 | — |
| 131.123.38.25 | 443 | C2 | N-W0rm | — | — | MD | AS200019 | 2026-09-28 | — |
| 121.43.58.113 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-28 | — |
| 114.215.184.158 | 1099 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-28 | — |
| 94.154.32.44 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-28 | 2026-10-03 |
| 94.130.72.248 | 80 | C2 | Mirai | — | — | DE | AS24940 | 2026-09-28 | 2026-10-03 |
| 91.92.41.40 | 56002 | C2 | PureRAT | — | — | BG | AS211443 | 2026-09-28 | 2026-10-03 |
| 91.92.41.40 | 56003 | C2 | PureRAT | — | — | BG | AS211443 | 2026-09-28 | 2026-10-03 |
| 91.92.41.40 | 56001 | C2 | PureRAT | — | — | BG | AS211443 | 2026-09-28 | 2026-10-03 |
| 72.51.59.132 | 56001 | C2 | PureRAT | — | — | US | AS398019 | 2026-09-28 | 2026-10-03 |
| 72.51.59.132 | 56002 | C2 | PureRAT | — | — | US | AS398019 | 2026-09-28 | 2026-10-03 |
| 64.94.85.173 | 7443 | C2 | Unknown | — | — | US | AS399629 | 2026-09-28 | 2026-10-03 |
| 62.60.155.33 | 1907 | C2 | DCRat | — | — | IR | AS203273 | 2026-09-28 | 2026-10-03 |
| 51.54.125.210 | 443 | C2 | Unknown | — | — | GB | AS8070 | 2026-09-28 | 2026-10-03 |
| 50.114.179.215 | 56003 | C2 | PureRAT | — | — | US | AS19318 | 2026-09-28 | 2026-10-03 |
| 45.88.91.164 | 443 | C2 | PureRAT | — | — | BG | AS399486 | 2026-09-28 | 2026-10-03 |
| 45.152.242.130 | 443 | C2 | DanaBot | — | — | LT | AS200169 | 2026-09-28 | 2026-10-03 |
| 45.139.104.180 | 443 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-28 | 2026-10-03 |
| 36.255.97.47 | 6606 | C2 | AsyncRAT | — | — | PK | AS403005 | 2026-09-28 | 2026-10-03 |
| 34.116.132.157 | 8444 | C2 | Havoc | — | — | US | AS396982 | 2026-09-28 | 2026-10-03 |
| 20.234.176.98 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-28 | 2026-10-03 |
| 20.93.144.28 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-28 | 2026-10-03 |
| 20.160.224.10 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-28 | 2026-10-03 |
| 20.160.224.11 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-28 | 2026-10-03 |
| 177.22.117.0 | 9001 | C2 | DanaBot | — | — | BR | AS263331 | 2026-09-28 | 2026-10-03 |
| 172.245.106.144 | 80 | C2 | Mirai | — | — | US | AS36352 | 2026-09-28 | 2026-10-03 |
| 163.172.248.3 | 443 | C2 | Unknown | — | — | FR | AS12876 | 2026-09-28 | 2026-10-03 |
| 156.252.91.7 | 443 | C2 | DanaBot | — | — | SC | AS401362 | 2026-09-28 | 2026-10-03 |
| 154.86.96.35 | 443 | C2 | DanaBot | — | — | SC | AS401362 | 2026-09-28 | 2026-10-03 |
| 125.75.36.126 | 40213 | C2 | AdaptixC2 | — | — | CN | AS4134 | 2026-09-28 | 2026-10-03 |
| 102.117.164.35 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-28 | 2026-10-03 |
| 95.217.135.208 | 8080 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 114.215.184.158 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-28 | — |
| 95.217.135.208 | 80 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 95.217.135.208 | 443 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | 2026-09-30 |
| 95.217.135.208 | 22 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 104.238.57.221 | 5000 | Payload | Unknown | — | — | US | AS199959 | 2026-09-28 | — |
| 45.133.180.18 | 2424 | C2 | Remcos | — | — | RO | AS9009 | 2026-09-28 | 2026-10-02 |
| 176.65.148.49 | 45 | C2 | Mirai | — | — | DE | AS51396 | 2026-09-28 | — |
| 89.185.82.38 | 15987 | C2 | Potassium | — | — | RU | AS215540 | 2026-09-28 | 2026-10-03 |
| 63.176.174.154 | 4449 | C2 | AsyncRAT | — | — | US | AS16509 | 2026-09-28 | — |
| 103.131.131.96 | 7007 | C2 | XWorm | — | — | SG | AS931 | 2026-09-28 | — |