| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 179.43.190.13 | 443 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-14 | — |
| 128.241.231.135 | 18082 | C2 | VShell | — | — | US | AS213802 | 2026-07-14 | — |
| 162.249.125.141 | 13 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 162.249.125.141 | 80 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 27.133.154.218 | 443 | C2 | QakBot | — | — | JP | AS9370 · SAKURA-B SAKURA Internet Inc. | 2026-03-04 | 2026-03-05 |
| 178.62.3.223 | 443 | C2 | QakBot | — | box.nautadb.com | GB | AS14061 · DIGITALOCEAN-ASN - DigitalOcean, LLC | 2026-02-17 | 2026-02-18 |
| 34.204.119.63 | 443 | C2 | QakBot | — | ec2-34-204-119-63.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2026-01-13 | 2026-03-01 |
| 50.16.16.211 | 443 | C2 | QakBot | — | ec2-50-16-16-211.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2025-12-30 | 2026-03-12 |
| 162.243.103.246 | 8080 | C2 | Emotet | — | — | US | AS14061 · DIGITALOCEAN-ASN | 2022-06-04 | 2026-03-07 |