| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 128.90.122.7 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-24 | — |
| 188.253.26.190 | 443 | C2 | Remcos | — | — | AU | AS42532 | 2026-09-24 | 2026-09-26 |
| 77.91.71.18 | 31337 | C2 | Remcos | — | — | RU | AS211486 | 2026-09-24 | 2026-09-26 |
| 209.38.82.85 | 8080 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-09-24 | — |
| 209.38.82.85 | 80 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-09-24 | — |
| 43.228.157.233 | 6767 | C2 | AsyncRAT | — | — | PK | AS403005 | 2026-09-24 | — |
| 82.23.246.136 | 6136 | C2 | Unknown | — | — | GB | AS138643 | 2026-09-24 | — |
| 91.92.242.3 | 7171 | C2 | VShell | — | — | TR | AS202412 | 2026-09-24 | — |
| 27.14.2.173 | 8088 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-24 | — |
| 81.70.21.163 | 8088 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 81.70.21.163 | 4444 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 178.92.163.217 | 443 | C2 | Unknown | — | — | UA | AS272547 | 2026-09-24 | — |
| 178.92.163.217 | 8181 | C2 | Unknown | — | — | UA | AS272547 | 2026-09-24 | — |
| 104.248.194.193 | 80 | C2 | AMOS | — | — | US | AS14061 | 2026-09-24 | — |
| 195.177.94.253 | 4332 | C2 | Remcos | — | — | UA | AS214961 | 2026-09-24 | — |
| 161.35.197.52 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-24 | — |
| 47.96.137.72 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-24 | — |
| 27.14.2.173 | 3000 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-24 | — |
| 85.11.182.104 | 8080 | C2 | Cobalt Strike | — | — | BG | AS209101 | 2026-09-24 | — |
| 85.11.182.104 | 80 | C2 | Cobalt Strike | — | — | BG | AS209101 | 2026-09-24 | — |
| 85.11.182.104 | 22 | C2 | Cobalt Strike | — | — | BG | AS209101 | 2026-09-24 | — |
| 156.254.20.48 | 8080 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 156.254.20.48 | 80 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 156.254.20.48 | 443 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 46.246.12.23 | 7045 | C2 | Houdini | — | — | SE | AS42708 | 2026-09-24 | — |
| 46.246.12.23 | 32722 | C2 | Houdini | — | — | SE | AS42708 | 2026-09-24 | — |
| 102.220.161.92 | 2021 | C2 | XWorm | — | — | NG | AS197769 | 2026-09-24 | — |
| 156.254.20.47 | 8080 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 156.254.20.47 | 80 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 156.254.20.47 | 443 | C2 | Cobalt Strike | — | — | SC | AS153706 | 2026-09-24 | — |
| 101.35.217.145 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 94.154.43.83 | 8443 | C2 | MicroStealer | — | — | UA | AS219502 | 2026-09-24 | — |
| 134.122.200.153 | 8151 | C2 | Unknown | — | — | SG | AS152194 | 2026-09-24 | — |
| 143.92.38.221 | 8151 | C2 | Unknown | — | — | SG | AS152194 | 2026-09-24 | — |
| 134.122.204.114 | 8151 | C2 | Unknown | — | — | SG | AS152194 | 2026-09-24 | — |
| 91.92.33.76 | 80 | Payload | ClearFake | — | — | BG | AS207043 | 2026-09-24 | — |
| 159.65.83.2 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-24 | — |
| 152.42.173.73 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-24 | — |
| 206.189.104.97 | 80 | C2 | AMOS | — | — | US | AS14061 | 2026-09-24 | — |
| 168.144.98.150 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-24 | — |
| 101.35.217.145 | 8081 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 101.35.217.145 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 101.35.217.145 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 101.35.217.145 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 101.35.217.145 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-24 | — |
| 117.72.32.75 | 5000 | C2 | Unknown | — | — | CN | AS141679 | 2026-09-24 | — |
| 152.136.119.249 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-24 | — |
| 107.148.78.97 | 8084 | C2 | VShell | — | — | US | AS394432 | 2026-09-24 | — |
| 103.36.223.45 | 8084 | C2 | VShell | — | — | CN | AS58519 | 2026-09-24 | — |
| 111.229.248.198 | 8085 | C2 | VShell | — | — | CN | AS45090 | 2026-09-24 | — |