| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 216.9.225.130 | 14641 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 89.185.82.37 | 15987 | C2 | Potassium | — | — | RU | AS215540 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14649 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14642 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14643 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14645 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14646 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14647 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 216.9.225.130 | 14648 | C2 | Remcos | — | — | US | AS44382 | 2026-09-28 | 2026-10-02 |
| 104.105.9.5 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-28 | — |
| 139.162.134.94 | 443 | C2 | Vidar | — | — | NL | AS63949 | 2026-09-28 | — |
| 65.109.113.253 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 91.107.163.163 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 217.60.103.124 | 443 | C2 | Vidar | — | — | AE | AS209373 | 2026-09-28 | — |
| 91.107.180.11 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 91.107.188.73 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 2.29.60.19 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 172.234.109.183 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-28 | — |
| 2.29.24.223 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-28 | — |
| 217.60.103.158 | 443 | C2 | Vidar | — | — | AE | AS209373 | 2026-09-28 | — |
| 172.236.209.126 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-28 | — |
| 185.137.93.64 | 1058 | C2 | Remcos | — | — | AE | AS215703 | 2026-09-28 | — |
| 185.137.93.64 | 1059 | C2 | Remcos | — | — | AE | AS215703 | 2026-09-28 | — |
| 179.43.170.151 | 443 | C2 | Havoc | — | — | PA | AS51852 | 2026-09-28 | — |
| 134.175.40.200 | 8888 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-28 | — |
| 180.93.236.78 | 80 | C2 | Remcos | — | — | VN | AS7602 | 2026-09-28 | 2026-10-03 |
| 193.233.210.226 | 80 | C2 | AMOS | — | — | RU | AS210644 | 2026-09-28 | — |
| 212.192.14.31 | 42061 | C2 | Potassium | — | — | AE | AS207713 | 2026-09-28 | — |
| 194.50.16.15 | 4560 | C2 | Unknown | — | — | US | AS49870 | 2026-09-28 | — |
| 87.121.79.227 | 4560 | C2 | Unknown | — | — | — | — | 2026-09-28 | — |
| 194.48.251.40 | 4560 | C2 | Unknown | — | — | — | — | 2026-09-28 | — |
| 194.50.16.15 | 4561 | Payload | Unknown | — | — | US | AS49870 | 2026-09-28 | — |
| 87.121.79.78 | 80 | Payload | Unknown | — | — | — | — | 2026-09-28 | — |
| 156.239.4.189 | 8889 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-28 | — |
| 144.172.69.79 | 443 | C2 | Havoc | — | — | US | AS30823 | 2026-09-28 | 2026-10-03 |
| 199.91.221.4 | 80 | C2 | AMOS | — | — | US | AS399629 | 2026-09-28 | — |
| 45.198.224.102 | 8080 | C2 | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 2139 | C2 | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 1337 | Payload | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 12312 | Payload | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 25565 | Payload | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 25567 | Payload | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 45.198.224.102 | 25568 | Payload | Unknown | — | — | SC | AS215925 | 2026-09-28 | — |
| 103.115.49.68 | 8090 | C2 | Unknown | — | — | CN | AS55933 | 2026-09-28 | — |
| 85.198.108.131 | 51227 | C2 | BianLian | — | — | RU | AS48282 | 2026-09-28 | 2026-10-03 |
| 83.136.210.2 | 6666 | C2 | AsyncRAT | — | — | FR | AS400897 | 2026-09-28 | 2026-10-03 |
| 80.190.77.86 | 20400 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-09-28 | 2026-10-03 |
| 52.197.194.156 | 443 | C2 | PureRAT | — | — | US | AS16509 | 2026-09-28 | 2026-10-03 |
| 36.248.232.190 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-28 | 2026-10-03 |
| 36.255.97.47 | 7707 | C2 | AsyncRAT | — | — | PK | AS403005 | 2026-09-28 | 2026-10-03 |