| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 46.183.223.30 | 465 | C2 | Remcos | — | — | LV | AS52048 | 2026-09-22 | 2026-09-28 |
| 174.129.92.184 | 8809 | Payload | Grandoreiro | — | — | US | AS14618 | 2026-09-22 | — |
| 188.212.158.34 | 6000 | C2 | XWorm | — | — | NL | AS142299 | 2026-09-22 | — |
| 111.230.37.219 | 9004 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 111.230.37.219 | 8123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 111.230.37.219 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | 2026-09-28 |
| 111.230.37.219 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 111.230.37.219 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 111.230.37.219 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-22 | — |
| 121.43.58.113 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 121.43.58.113 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 121.43.58.113 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 159.223.150.218 | 2538 | C2 | Remus | — | — | US | AS14061 | 2026-09-22 | — |
| 134.209.106.204 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | 2026-09-25 |
| 104.249.10.101 | 7004 | C2 | XWorm | — | — | GB | AS214961 | 2026-09-22 | — |
| 105.158.184.236 | 8808 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-09-22 | — |
| 149.88.73.83 | 8000 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-09-22 | — |
| 149.88.73.83 | 8080 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-09-22 | 2026-09-28 |
| 149.88.73.83 | 80 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-09-22 | — |
| 149.88.73.83 | 443 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-09-22 | — |
| 94.154.43.12 | 33 | C2 | Mirai | — | — | UA | AS219502 | 2026-09-22 | — |
| 149.88.73.83 | 22 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-09-22 | — |
| 207.57.125.216 | 8084 | C2 | VShell | — | — | US | AS139659 | 2026-09-22 | — |
| 45.8.46.122 | 8090 | C2 | Unknown | — | — | RO | AS49468 | 2026-09-22 | — |
| 102.117.169.159 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-22 | — |
| 78.17.212.127 | 8080 | C2 | Cobalt Strike | — | — | AE | AS212477 | 2026-09-22 | — |
| 130.78.189.71 | 8001 | C2 | Aisuru | — | — | NL | AS218891 | 2026-09-22 | 2026-09-23 |
| 2.27.62.228 | 60201 | C2 | Remcos | — | — | US | AS200051 | 2026-09-22 | 2026-09-28 |
| 134.209.106.204 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | 2026-09-26 |
| 43.173.38.253 | 12345 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-22 | 2026-09-22 |
| 43.173.38.253 | 9034 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-22 | 2026-09-23 |
| 160.179.176.98 | 2222 | C2 | Meterpreter | — | — | MA | AS36903 | 2026-09-22 | — |
| 222.141.122.254 | 34413 | Payload | Mirai | — | — | CN | AS4837 | 2026-09-22 | — |
| 113.228.85.214 | 50311 | Payload | Mirai | — | — | CN | AS4837 | 2026-09-22 | — |
| 81.227.54.149 | 33012 | Payload | Mirai | — | — | SE | AS3301 | 2026-09-22 | — |
| 113.17.176.184 | 42461 | Payload | Mirai | — | — | CN | AS4134 | 2026-09-22 | — |
| 43.173.38.253 | 34567 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-22 | 2026-09-23 |
| 43.173.38.253 | 37215 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-22 | 2026-09-23 |
| 134.209.223.192 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-22 | 2026-09-22 |
| 193.32.2.245 | 8080 | C2 | Unknown | — | — | SC | AS60781 | 2026-09-22 | — |
| 78.17.212.127 | 80 | C2 | Cobalt Strike | — | — | AE | AS212477 | 2026-09-22 | — |
| 78.17.212.127 | 4444 | C2 | Cobalt Strike | — | — | AE | AS212477 | 2026-09-22 | — |
| 91.92.241.149 | 8808 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-09-22 | — |
| 60.217.23.146 | 7788 | C2 | Cobalt Strike | — | — | CN | AS4837 | 2026-09-22 | 2026-09-28 |
| 52.47.77.229 | 9000 | C2 | AsyncRAT | — | — | US | AS16509 | 2026-09-22 | — |
| 52.47.77.229 | 3000 | C2 | AsyncRAT | — | — | US | AS16509 | 2026-09-22 | — |
| 116.62.174.16 | 8088 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-22 | — |
| 124.223.164.97 | 6443 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 119.91.222.25 | 1433 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 114.132.229.238 | 8083 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |