| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 49.233.181.236 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-25 | — |
| 49.233.181.236 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-25 | — |
| 49.233.181.236 | 4567 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-25 | — |
| 81.70.21.248 | 6667 | C2 | VShell | — | — | CN | AS45090 | 2026-09-25 | — |
| 39.109.126.185 | 12307 | C2 | VShell | — | — | HK | AS142403 | 2026-09-25 | — |
| 122.10.71.108 | 443 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 139.180.213.153 | 8080 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-09-25 | — |
| 139.180.213.153 | 80 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-09-25 | — |
| 31.169.125.79 | 46543 | C2 | Unknown | — | — | BG | AS41745 | 2026-09-25 | — |
| 191.124.5.229 | 8443 | C2 | Cobalt Strike | — | — | HK | AS400619 | 2026-09-25 | — |
| 47.109.48.152 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-25 | 2026-09-26 |
| 210.16.168.11 | 9999 | C2 | Cobalt Strike | — | — | CN | AS146817 | 2026-09-25 | — |
| 85.137.56.145 | 4782 | C2 | Quasar RAT | — | — | UA | AS43641 | 2026-09-25 | 2026-09-27 |
| 156.254.20.48 | 3622 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-25 | — |
| 156.254.20.48 | 888 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-25 | — |
| 1.12.59.176 | 8006 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-25 | — |
| 23.27.143.19 | 22 | C2 | Cobalt Strike | — | — | US | AS149440 | 2026-09-25 | — |
| 128.90.103.193 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-25 | — |
| 217.217.97.60 | 8093 | C2 | Unknown | — | — | DE | AS214961 | 2026-09-25 | — |
| 47.94.56.71 | 8443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-25 | — |
| 168.231.121.175 | 5263 | C2 | Remus | — | — | LT | AS47583 | 2026-09-25 | — |
| 172.111.163.171 | 65070 | C2 | Remcos | — | — | US | AS9009 | 2026-09-25 | 2026-09-25 |
| 1.94.129.250 | 8098 | C2 | VShell | — | — | CN | AS55990 | 2026-09-25 | — |
| 87.120.244.231 | 8888 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 87.120.244.231 | 8443 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 87.120.244.231 | 3002 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 87.120.244.231 | 3001 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 87.120.244.231 | 80 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 87.120.244.231 | 22 | C2 | Unknown | — | — | GB | AS200019 | 2026-09-25 | — |
| 122.10.71.108 | 50918 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.108 | 34890 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.108 | 8888 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.108 | 888 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.71.108 | 80 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 50918 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 34890 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 8888 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 888 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 443 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 122.10.24.106 | 80 | C2 | Unknown | — | — | HK | AS134548 | 2026-09-25 | — |
| 143.244.141.187 | 5003 | C2 | Remus | — | — | US | AS14061 | 2026-09-25 | — |
| 202.61.160.183 | 446 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-09-25 | — |
| 135.136.158.9 | 2430 | C2 | Remcos | — | — | SG | AS931 | 2026-09-25 | — |
| 146.19.49.35 | 33474 | C2 | RedLine Stealer | — | — | EE | AS62005 | 2026-09-25 | — |
| 178.128.102.154 | 443 | C2 | Nanocore RAT | — | — | US | AS14061 | 2026-09-25 | — |
| 39.96.15.121 | 8083 | C2 | VShell | — | — | CN | AS37963 | 2026-09-25 | — |
| 23.27.143.19 | 8080 | C2 | Cobalt Strike | — | — | US | AS149440 | 2026-09-25 | — |
| 23.27.143.19 | 443 | C2 | Cobalt Strike | — | — | US | AS149440 | 2026-09-25 | — |
| 124.222.21.29 | 8888 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-24 | — |
| 217.60.103.120 | 2404 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-24 | 2026-09-27 |