| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.49.190.185 | 23789 | C2 | Potassium | — | — | RU | AS215540 | 2026-09-26 | 2026-09-28 |
| 45.95.233.131 | 23789 | C2 | Potassium | — | — | RU | AS215540 | 2026-09-26 | 2026-09-27 |
| 45.203.213.168 | 1080 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-26 | — |
| 156.254.20.47 | 3622 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-26 | — |
| 156.254.20.47 | 888 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-26 | — |
| 38.76.190.209 | 40443 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-26 | — |
| 88.222.242.235 | 4262 | C2 | Remus | — | — | LT | AS47583 | 2026-09-26 | — |
| 88.222.242.235 | 5713 | C2 | Remus | — | — | LT | AS47583 | 2026-09-26 | — |
| 176.65.134.121 | 8080 | Payload | Bashlite | — | — | DE | AS51396 | 2026-09-26 | — |
| 5.189.132.216 | 23292 | C2 | NonEuclid RAT | — | — | DE | AS51167 | 2026-09-26 | — |
| 13.140.59.149 | 443 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-26 | — |
| 47.114.83.19 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-26 | — |
| 94.154.43.253 | 9111 | C2 | Unknown | — | — | UA | AS219502 | 2026-09-26 | — |
| 111.230.151.198 | 8089 | C2 | VShell | — | — | CN | AS45090 | 2026-09-26 | — |
| 20.52.184.247 | 7000 | C2 | Quasar RAT | — | — | US | AS8075 | 2026-09-26 | — |
| 108.186.221.91 | 8041 | C2 | Unknown | — | — | US | AS19318 | 2026-09-26 | — |
| 201.7.16.231 | 11121 | C2 | Unknown | — | — | PL | AS152565 | 2026-09-26 | — |
| 45.125.66.67 | 8080 | C2 | Aisuru | — | — | HK | AS133398 | 2026-09-26 | — |
| 45.125.66.67 | 8001 | C2 | Aisuru | — | — | HK | AS133398 | 2026-09-26 | — |
| 128.90.103.171 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-26 | — |
| 164.92.197.127 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-26 | 2026-09-27 |
| 43.143.38.95 | 19999 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-26 | — |
| 38.18.231.159 | 8080 | C2 | Quasar RAT | — | — | US | AS397423 | 2026-09-26 | 2026-09-26 |
| 176.65.149.45 | 1312 | C2 | Mirai | — | — | DE | AS51396 | 2026-09-26 | — |
| 178.253.31.5 | 8080 | C2 | Cobalt Strike | — | — | GR | AS204339 | 2026-09-26 | — |
| 178.253.31.5 | 443 | C2 | Cobalt Strike | — | — | GR | AS204339 | 2026-09-26 | — |
| 111.170.148.132 | 37330 | C2 | Unknown | — | — | CN | AS151185 | 2026-09-26 | — |
| 117.72.72.254 | 8091 | C2 | Unknown | — | — | CN | AS141679 | 2026-09-26 | — |
| 116.89.250.121 | 18084 | C2 | VShell | — | — | HK | AS132813 | 2026-09-26 | — |
| 194.26.192.168 | 9110 | C2 | Quasar RAT | — | — | DE | AS210558 | 2026-09-26 | 2026-09-26 |
| 45.148.10.165 | 8843 | C2 | AdaptixC2 | — | — | RO | AS48090 | 2026-09-25 | 2026-09-26 |
| 20.109.157.64 | 4444 | C2 | Quasar RAT | — | — | US | AS8075 | 2026-09-25 | — |
| 91.92.47.99 | 8088 | C2 | Cobalt Strike | — | — | BG | AS197170 | 2026-09-25 | — |
| 47.114.83.19 | 1234 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-25 | — |
| 217.60.103.25 | 7193 | C2 | Potassium | — | — | AE | AS209373 | 2026-09-25 | 2026-09-27 |
| 213.108.3.84 | 7061 | C2 | Drifter | — | — | RU | AS41745 | 2026-09-25 | 2026-09-28 |
| 138.124.251.63 | 7061 | C2 | Drifter | — | — | CH | AS41745 | 2026-09-25 | 2026-09-28 |
| 104.165.244.81 | 7061 | C2 | Drifter | — | — | US | AS41745 | 2026-09-25 | 2026-09-28 |
| 94.26.83.69 | 80 | C2 | Unknown | — | — | BG | AS207043 | 2026-09-25 | — |
| 128.90.123.244 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-25 | — |
| 160.250.5.251 | 8080 | C2 | AdaptixC2 | — | — | VN | AS150895 | 2026-09-25 | — |
| 160.250.5.251 | 80 | C2 | AdaptixC2 | — | — | VN | AS150895 | 2026-09-25 | — |
| 20.90.116.54 | 443 | C2 | Havoc | — | — | US | AS8075 | 2026-09-25 | — |
| 122.10.71.109 | 50918 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.109 | 34890 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 172.94.46.114 | 1012 | C2 | NjRAT | — | — | US | AS9009 | 2026-09-25 | — |
| 122.10.71.109 | 888 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.109 | 80 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 101.43.53.103 | 9123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-25 | — |
| 93.127.131.161 | 80 | C2 | AsyncRAT | — | — | DE | AS401479 | 2026-09-25 | — |