| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 1.12.59.176 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 196.251.121.250 | 2404 | C2 | Remcos | — | — | — | — | 2026-09-22 | 2026-09-29 |
| 176.65.139.158 | 6767 | C2 | Mirai | — | — | DE | AS219502 | 2026-09-22 | — |
| 1.12.59.176 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 1.12.59.176 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 1.12.59.176 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 80.87.206.86 | 18082 | C2 | Unknown | — | — | RU | AS16276 | 2026-09-22 | — |
| 191.96.225.78 | 8990 | C2 | Unknown | — | — | AE | AS270353 | 2026-09-22 | — |
| 177.201.238.71 | 56230 | C2 | Unknown | — | — | HK | AS140227 | 2026-09-22 | — |
| 128.90.122.28 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-22 | — |
| 31.77.109.87 | 443 | C2 | PureLogs Stealer | — | — | US | AS218731 | 2026-09-22 | — |
| 31.56.36.171 | 4521 | C2 | LxBase RAT | — | — | AE | AS60781 | 2026-09-22 | — |
| 31.56.209.155 | 3398 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 31.56.209.155 | 2406 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 31.56.209.155 | 2409 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 155.103.69.190 | 7787 | C2 | XWorm | — | — | US | AS44382 | 2026-09-22 | — |
| 203.202.232.59 | 7447 | C2 | Unknown RAT | — | — | TR | AS44382 | 2026-09-22 | — |
| 46.151.182.5 | 7007 | C2 | XWorm | — | — | NL | AS36680 | 2026-09-22 | — |
| 45.225.135.115 | 4356 | C2 | Remcos | — | — | PA | AS64107 | 2026-09-22 | 2026-09-28 |
| 204.10.160.216 | 3609 | C2 | STRRAT | — | — | CA | AS64236 | 2026-09-22 | — |
| 45.203.213.168 | 13443 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 45.203.213.168 | 8443 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 60.217.23.146 | 7789 | C2 | Cobalt Strike | — | — | CN | AS4837 | 2026-09-22 | 2026-09-28 |
| 144.126.234.230 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | — |
| 132.243.175.245 | 2466 | C2 | Remcos | — | — | GB | AS200019 | 2026-09-22 | 2026-09-24 |
| 108.187.43.222 | 443 | C2 | Unknown | — | — | US | AS138995 | 2026-09-22 | — |
| 89.106.83.35 | 8823 | C2 | XWorm | — | — | DE | AS200051 | 2026-09-22 | — |
| 45.203.213.168 | 8088 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 45.203.213.168 | 8080 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 45.203.213.168 | 80 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | — |
| 45.203.213.168 | 443 | C2 | Cobalt Strike | — | — | SC | AS140869 | 2026-09-22 | 2026-09-28 |
| 116.62.174.16 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 91.92.47.99 | 8080 | C2 | Cobalt Strike | — | — | BG | AS197170 | 2026-09-22 | — |
| 91.92.47.99 | 80 | C2 | Cobalt Strike | — | — | BG | AS197170 | 2026-09-22 | — |
| 91.92.47.99 | 22 | C2 | Cobalt Strike | — | — | BG | AS197170 | 2026-09-22 | — |
| 130.94.29.211 | 8090 | C2 | VShell | — | — | US | AS154177 | 2026-09-22 | — |
| 91.92.47.99 | 443 | C2 | Cobalt Strike | — | — | BG | AS197170 | 2026-09-22 | 2026-09-28 |
| 175.124.145.102 | 80 | C2 | Cobalt Strike | — | — | KR | AS9318 | 2026-09-22 | 2026-09-28 |
| 141.255.162.236 | 37422 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-09-22 | 2026-09-28 |
| 123.207.214.140 | 6322 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | 2026-09-28 |
| 123.207.214.140 | 6321 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | 2026-09-28 |
| 43.173.38.253 | 9035 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-22 | 2026-09-23 |
| 155.103.71.233 | 14647 | C2 | Remcos | — | — | US | AS44382 | 2026-09-22 | 2026-09-28 |
| 130.94.29.211 | 8080 | C2 | VShell | — | — | US | AS154177 | 2026-09-22 | — |
| 1.14.100.25 | 8888 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 23.159.160.195 | 8888 | C2 | Unknown | — | — | US | AS26548 | 2026-09-22 | — |
| 23.159.160.195 | 111 | C2 | Unknown | — | — | US | AS26548 | 2026-09-22 | — |
| 23.159.160.195 | 22 | C2 | Unknown | — | — | US | AS26548 | 2026-09-22 | — |
| 103.42.30.245 | 6088 | C2 | ValleyRAT | — | — | CN | AS62468 | 2026-09-22 | — |
| 89.106.83.156 | 8799 | C2 | PureLogs Stealer | — | — | DE | AS200051 | 2026-09-22 | — |