| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 139.99.88.62 | 3778 | C2 | XWorm | — | — | CA | AS16276 | 2026-09-22 | — |
| 162.14.107.40 | 8089 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 120.46.128.236 | 8084 | C2 | VShell | — | — | CN | AS55990 | 2026-09-22 | — |
| 93.177.77.234 | 8085 | C2 | VShell | — | — | HK | AS55933 | 2026-09-22 | — |
| 64.118.132.68 | 8083 | C2 | VShell | — | — | HK | AS138997 | 2026-09-22 | — |
| 45.76.110.248 | 8084 | C2 | VShell | — | — | US | AS20473 | 2026-09-22 | — |
| 160.202.133.94 | 2404 | C2 | Remcos | — | — | US | AS60781 | 2026-09-22 | — |
| 134.33.66.210 | 443 | C2 | Unknown | — | — | GB | AS8075 | 2026-09-22 | 2026-09-22 |
| 217.60.195.168 | 2022 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-22 | 2026-09-25 |
| 154.12.117.217 | 2404 | C2 | Remcos | — | — | US | AS26832 | 2026-09-22 | 2026-09-28 |
| 49.234.47.190 | 8085 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 117.72.215.144 | 8080 | C2 | VShell | — | — | CN | AS141679 | 2026-09-22 | — |
| 111.230.37.219 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 42.239.191.25 | 54429 | Payload | Mirai | — | — | CN | AS4837 | 2026-09-22 | — |
| 134.209.106.204 | 5555 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | — |
| 143.244.130.3 | 6527 | C2 | Remus | — | — | US | AS14061 | 2026-09-22 | 2026-09-24 |
| 139.155.42.198 | 8089 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 47.97.199.23 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 47.97.199.23 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 145.79.143.4 | 8080 | C2 | Cobalt Strike | — | — | DE | AS205548 | 2026-09-22 | 2026-09-23 |
| 84.200.91.170 | 443 | C2 | PureRAT | — | — | DE | AS214036 | 2026-09-22 | 2026-09-28 |
| 5.175.169.148 | 443 | C2 | PureRAT | — | — | DE | AS219067 | 2026-09-22 | 2026-09-28 |
| 46.40.193.169 | 1723 | C2 | AsyncRAT | — | — | OM | AS50010 | 2026-09-22 | 2026-09-28 |
| 46.246.84.6 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-09-22 | 2026-09-28 |
| 41.68.226.249 | 5554 | C2 | DCRat | — | — | EG | AS24835 | 2026-09-22 | 2026-09-28 |
| 36.248.232.160 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-22 | 2026-09-28 |
| 34.87.129.214 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-22 | 2026-09-28 |
| 217.60.195.60 | 56003 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 217.60.195.60 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 217.60.195.60 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 217.60.195.60 | 443 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-22 | 2026-09-28 |
| 193.143.1.247 | 8848 | C2 | DCRat | — | — | RU | AS198953 | 2026-09-22 | 2026-09-28 |
| 192.142.10.165 | 8808 | C2 | AsyncRAT | — | — | ZA | AS214036 | 2026-09-22 | 2026-09-28 |
| 188.48.121.249 | 443 | C2 | Havoc | — | — | SA | AS25019 | 2026-09-22 | 2026-09-28 |
| 188.137.227.133 | 7707 | C2 | AsyncRAT | — | — | NL | AS211381 | 2026-09-22 | 2026-09-28 |
| 13.143.247.204 | 4810 | C2 | PureRAT | — | — | US | AS210558 | 2026-09-22 | 2026-09-28 |
| 121.41.70.79 | 9966 | C2 | AdaptixC2 | — | — | CN | AS37963 | 2026-09-22 | 2026-09-28 |
| 104.168.148.29 | 443 | C2 | PureRAT | — | — | US | AS54290 | 2026-09-22 | 2026-09-28 |
| 196.251.121.57 | 8080 | C2 | Remcos | — | — | SC | AS36680 | 2026-09-22 | — |
| 145.79.143.4 | 443 | C2 | Cobalt Strike | — | — | DE | AS205548 | 2026-09-22 | — |
| 145.79.143.4 | 22 | C2 | Cobalt Strike | — | — | DE | AS205548 | 2026-09-22 | — |
| 123.57.146.34 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 116.62.174.16 | 82 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 130.78.189.71 | 8443 | C2 | Aisuru | — | — | NL | AS218891 | 2026-09-22 | 2026-09-23 |
| 47.114.83.19 | 81 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | 2026-09-26 |
| 1.12.59.176 | 81 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | 2026-09-28 |
| 145.79.143.4 | 80 | C2 | Cobalt Strike | — | — | DE | AS205548 | 2026-09-22 | 2026-09-22 |
| 47.97.199.23 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | 2026-09-26 |
| 159.203.178.139 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | 2026-09-26 |
| 138.68.168.41 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | — |