| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.12.182.185 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-09-23 | — |
| 102.220.161.74 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-23 | — |
| 43.173.38.253 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-23 | — |
| 156.225.17.60 | 2014 | C2 | Ghost RAT | — | — | SC | AS401696 | 2026-09-23 | — |
| 156.225.17.60 | 113 | C2 | Ghost RAT | — | — | SC | AS401696 | 2026-09-23 | — |
| 124.223.57.38 | 10999 | C2 | VShell | — | — | CN | AS45090 | 2026-09-23 | — |
| 27.14.2.173 | 8888 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-23 | — |
| 27.14.2.173 | 8081 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-23 | — |
| 27.14.2.173 | 2053 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-23 | — |
| 27.14.2.173 | 22 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-23 | — |
| 160.250.131.245 | 14647 | C2 | Remcos | — | — | VN | AS135918 | 2026-09-23 | — |
| 64.89.160.127 | 5892 | C2 | XWorm | — | — | US | AS403005 | 2026-09-23 | — |
| 130.78.189.71 | 8080 | C2 | Aisuru | — | — | NL | AS218891 | 2026-09-23 | — |
| 172.236.206.42 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-23 | — |
| 172.236.206.79 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-23 | — |
| 65.108.13.120 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-23 | — |
| 172.238.110.27 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-09-23 | — |
| 65.21.230.223 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-23 | — |
| 27.14.2.173 | 21 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-23 | — |
| 207.189.27.144 | 9876 | C2 | Quasar RAT | — | — | SG | AS931 | 2026-09-23 | — |
| 38.175.192.57 | 8013 | C2 | VShell | — | — | US | AS979 | 2026-09-23 | — |
| 81.70.21.163 | 8012 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-23 | — |
| 8.163.59.20 | 7000 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-23 | — |
| 74.50.123.47 | 10729 | C2 | Remcos | — | — | US | AS29802 | 2026-09-23 | 2026-09-26 |
| 23.158.24.65 | 80 | C2 | AdaptixC2 | — | — | US | AS197767 | 2026-09-23 | — |
| 23.158.24.65 | 443 | C2 | AdaptixC2 | — | — | US | AS197767 | 2026-09-23 | — |
| 23.158.24.65 | 8080 | C2 | AdaptixC2 | — | — | US | AS197767 | 2026-09-23 | — |
| 47.97.199.23 | 9999 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-23 | — |
| 47.97.199.23 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-23 | — |
| 175.124.145.102 | 2222 | C2 | Cobalt Strike | — | — | KR | AS9318 | 2026-09-23 | — |
| 1.12.59.176 | 8088 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-23 | — |
| 81.70.97.147 | 8084 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-23 | — |
| 81.70.21.163 | 8899 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-23 | — |
| 124.221.221.58 | 80 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-23 | — |
| 172.169.251.53 | 8080 | C2 | AdaptixC2 | — | — | GB | AS8075 | 2026-09-23 | — |
| 172.169.251.53 | 80 | C2 | AdaptixC2 | — | — | GB | AS8075 | 2026-09-23 | — |
| 172.169.251.53 | 443 | C2 | AdaptixC2 | — | — | GB | AS8075 | 2026-09-23 | — |
| 58.87.65.43 | 8085 | C2 | VShell | — | — | CN | AS45090 | 2026-09-23 | — |
| 45.145.229.134 | 44443 | C2 | VShell | — | — | HK | AS139659 | 2026-09-22 | — |
| 45.203.213.168 | 18443 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 104.234.172.217 | 80 | C2 | VShell | — | — | CA | AS8796 | 2026-09-22 | — |
| 175.124.145.102 | 8080 | C2 | Cobalt Strike | — | — | KR | AS9318 | 2026-09-22 | — |
| 118.195.200.144 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 1.95.137.66 | 19999 | C2 | VShell | — | — | CN | AS55990 | 2026-09-22 | — |
| 81.70.21.163 | 389 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 223.109.142.7 | 1080 | C2 | Cobalt Strike | — | — | CN | AS56046 | 2026-09-22 | — |
| 47.114.83.19 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 47.114.83.19 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 47.114.83.19 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 81.70.21.163 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |