| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 20.93.144.148 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-22 | 2026-09-29 |
| 191.223.34.61 | 56003 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-22 | 2026-09-29 |
| 191.223.34.57 | 56003 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-22 | 2026-09-29 |
| 191.223.33.20 | 56003 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-22 | 2026-09-29 |
| 191.107.92.58 | 5012 | C2 | AsyncRAT | — | — | CO | AS3816 | 2026-09-22 | 2026-09-29 |
| 178.94.25.230 | 8902 | C2 | AdaptixC2 | — | — | UA | AS212238 | 2026-09-22 | 2026-09-29 |
| 172.94.9.194 | 7443 | C2 | Unknown | — | — | US | AS213790 | 2026-09-22 | 2026-09-29 |
| 172.93.161.96 | 56003 | C2 | PureRAT | — | — | US | AS27176 | 2026-09-22 | 2026-09-29 |
| 172.252.225.153 | 12688 | C2 | AdaptixC2 | — | — | US | AS153706 | 2026-09-22 | 2026-09-29 |
| 172.252.225.152 | 12688 | C2 | AdaptixC2 | — | — | US | AS153706 | 2026-09-22 | 2026-09-29 |
| 172.252.225.151 | 12688 | C2 | AdaptixC2 | — | — | US | AS153706 | 2026-09-22 | 2026-09-29 |
| 167.94.47.130 | 56002 | C2 | PureRAT | — | — | SG | AS931 | 2026-09-22 | 2026-09-29 |
| 162.33.177.101 | 443 | C2 | Havoc | — | — | US | AS399629 | 2026-09-22 | 2026-09-29 |
| 160.250.181.159 | 56002 | C2 | PureRAT | — | — | VN | AS150895 | 2026-09-22 | 2026-09-29 |
| 160.250.181.159 | 56001 | C2 | PureRAT | — | — | VN | AS150895 | 2026-09-22 | 2026-09-29 |
| 130.61.146.214 | 80 | C2 | Hook | — | — | US | AS31898 | 2026-09-22 | 2026-09-29 |
| 130.61.146.214 | 443 | C2 | Hook | — | — | US | AS31898 | 2026-09-22 | 2026-09-29 |
| 13.143.247.124 | 1881 | C2 | PureRAT | — | — | US | AS210558 | 2026-09-22 | 2026-09-29 |
| 13.127.122.166 | 7443 | C2 | Unknown | — | — | US | AS16509 | 2026-09-22 | 2026-09-29 |
| 109.74.144.151 | 46321 | C2 | AdaptixC2 | — | — | SK | AS29405 | 2026-09-22 | 2026-09-29 |
| 104.37.174.61 | 443 | C2 | PureRAT | — | — | US | AS396073 | 2026-09-22 | 2026-09-29 |
| 104.131.163.233 | 8080 | C2 | Evilginx | — | — | US | AS14061 | 2026-09-22 | 2026-09-29 |
| 102.220.163.36 | 7005 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-22 | 2026-09-29 |
| 102.117.163.135 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-22 | 2026-09-29 |
| 146.190.111.53 | 443 | C2 | Unknown | — | — | US | AS14061 | 2026-09-22 | 2026-09-29 |
| 196.251.121.250 | 2404 | C2 | Remcos | — | — | — | — | 2026-09-22 | 2026-09-29 |
| 43.165.168.164 | 4455 | C2 | VShell | — | — | SG | AS132203 | 2026-09-29 | — |
| 82.156.117.56 | 8443 | C2 | VShell | — | — | CN | AS45090 | 2026-09-29 | — |
| 154.36.188.124 | 7070 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 154.36.188.124 | 20 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 154.36.188.124 | 8080 | C2 | ValleyRAT | — | — | US | AS979 | 2026-09-28 | — |
| 82.158.89.252 | 7891 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 82.158.89.252 | 809 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 82.158.89.252 | 9178 | C2 | ValleyRAT | — | — | US | AS402506 | 2026-09-28 | — |
| 108.187.43.208 | 443 | C2 | ValleyRAT | — | — | US | AS138995 | 2026-09-28 | — |
| 77.37.41.59 | 9173 | C2 | Remus | — | — | DE | AS47583 | 2026-09-28 | — |
| 108.187.43.208 | 449 | C2 | ValleyRAT | — | — | US | AS138995 | 2026-09-28 | — |
| 131.123.38.25 | 443 | C2 | N-W0rm | — | — | MD | AS200019 | 2026-09-28 | — |
| 121.43.58.113 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-28 | — |
| 114.215.184.158 | 1099 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-28 | — |
| 95.217.135.208 | 8080 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 114.215.184.158 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-28 | — |
| 95.217.135.208 | 80 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 95.217.135.208 | 22 | C2 | Cobalt Strike | — | — | DE | AS24940 | 2026-09-28 | — |
| 104.238.57.221 | 5000 | Payload | Unknown | — | — | US | AS199959 | 2026-09-28 | — |
| 176.65.148.49 | 45 | C2 | Mirai | — | — | DE | AS51396 | 2026-09-28 | — |
| 63.176.174.154 | 4449 | C2 | AsyncRAT | — | — | US | AS16509 | 2026-09-28 | — |
| 103.131.131.96 | 7007 | C2 | XWorm | — | — | SG | AS931 | 2026-09-28 | — |
| 104.105.9.5 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-28 | — |
| 139.162.134.94 | 443 | C2 | Vidar | — | — | NL | AS63949 | 2026-09-28 | — |