| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.239.4.189 | 443 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-27 | — |
| 156.239.4.189 | 80 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-27 | — |
| 156.239.4.189 | 8080 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-27 | — |
| 156.239.4.189 | 22 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-27 | — |
| 152.42.143.45 | 80 | C2 | AMOS | — | — | US | AS14061 | 2026-09-27 | — |
| 45.205.1.136 | 7777 | C2 | Mirai | — | — | SC | AS215925 | 2026-09-27 | — |
| 45.205.1.136 | 7075 | C2 | Mirai | — | — | SC | AS215925 | 2026-09-27 | — |
| 62.85.76.113 | 8808 | C2 | AsyncRAT | — | — | LV | AS12578 | 2026-09-27 | — |
| 49.233.181.236 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-27 | — |
| 114.215.184.158 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-27 | — |
| 114.215.184.158 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-27 | — |
| 156.254.20.46 | 888 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-27 | — |
| 156.254.20.46 | 3622 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-27 | — |
| 156.254.20.46 | 443 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-27 | — |
| 156.254.20.46 | 8080 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-27 | — |
| 156.254.20.46 | 80 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-27 | — |
| 85.11.182.104 | 8082 | C2 | Cobalt Strike | — | — | BG | AS209101 | 2026-09-27 | — |
| 123.60.102.111 | 8080 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-27 | — |
| 123.60.102.111 | 80 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-27 | — |
| 46.8.102.144 | 443 | C2 | Unknown | — | — | CZ | AS211273 | 2026-09-27 | — |
| 46.8.102.144 | 8888 | C2 | Unknown | — | — | CZ | AS211273 | 2026-09-27 | — |
| 46.8.102.144 | 22 | C2 | Unknown | — | — | CZ | AS211273 | 2026-09-27 | — |
| 45.9.150.176 | 4332 | C2 | Remcos | — | — | DM | AS49447 | 2026-09-27 | 2026-09-28 |
| 8.148.241.203 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-27 | — |
| 123.60.102.111 | 443 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-27 | 2026-09-27 |
| 65.108.41.118 | 1801 | C2 | AsyncRAT | — | — | DE | AS24940 | 2026-09-27 | — |
| 65.108.41.118 | 102 | C2 | AsyncRAT | — | — | DE | AS24940 | 2026-09-27 | — |
| 39.96.203.222 | 8000 | C2 | VShell | — | — | CN | AS37963 | 2026-09-27 | — |
| 45.131.3.38 | 8443 | C2 | Quasar RAT | — | — | TR | AS215027 | 2026-09-27 | — |
| 172.94.58.29 | 2404 | C2 | Remcos | — | — | US | AS3223 | 2026-09-27 | 2026-09-28 |
| 188.166.246.245 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-27 | — |
| 196.251.107.171 | 3000 | C2 | AMOS | — | — | SC | AS214351 | 2026-09-27 | 2026-09-27 |
| 13.140.176.180 | 14593 | C2 | Mirai | — | — | DE | AS51167 | 2026-09-27 | — |
| 13.140.176.180 | 9110 | C2 | Unknown | — | — | DE | AS51167 | 2026-09-27 | — |
| 172.86.85.39 | 9999 | C2 | Unknown | — | — | US | AS14956 | 2026-09-27 | — |
| 130.12.180.42 | 14593 | C2 | Mirai | — | — | US | AS202412 | 2026-09-27 | 2026-09-27 |
| 188.212.158.203 | 7707 | C2 | AsyncRAT | — | — | NL | AS142299 | 2026-09-27 | 2026-09-28 |
| 217.216.59.19 | 80 | C2 | VShell | — | — | DE | AS141995 | 2026-09-26 | — |
| 20.52.184.247 | 8080 | C2 | Quasar RAT | — | — | US | AS8075 | 2026-09-26 | — |
| 185.130.46.191 | 443 | C2 | Cobalt Strike | — | — | BZ | AS210083 | 2026-09-26 | — |
| 160.75.77.162 | 53 | C2 | Cobalt Strike | — | — | TR | AS9095 | 2026-09-26 | — |
| 173.199.90.252 | 443 | C2 | Cobalt Strike | — | — | US | AS20473 | 2026-09-26 | 2026-09-26 |
| 64.89.160.48 | 80 | Payload | Mirai | — | — | US | AS403005 | 2026-09-26 | — |
| 194.15.36.172 | 443 | C2 | Unknown | — | — | DE | AS58087 | 2026-09-26 | — |
| 37.114.41.131 | 443 | C2 | Unknown | — | — | DE | AS203446 | 2026-09-26 | — |
| 130.49.190.185 | 15987 | C2 | Potassium | — | — | RU | AS215540 | 2026-09-26 | — |
| 101.34.208.175 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-26 | — |
| 101.34.208.175 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-26 | — |
| 103.39.79.102 | 1002 | C2 | Unknown | — | — | HK | AS932 | 2026-09-26 | — |
| 120.26.71.13 | 8090 | C2 | VShell | — | — | CN | AS37963 | 2026-09-26 | — |