| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 36.69.157.49 | 22 | C2 | XMRIG | — | — | ID | AS7713 | 2026-09-21 | — |
| 176.123.5.4 | 443 | C2 | Cobalt Strike | — | — | MD | AS200019 | 2026-09-21 | — |
| 178.62.118.210 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-21 | 2026-09-22 |
| 102.220.163.40 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-21 | 2026-09-26 |
| 45.198.224.184 | 80 | Payload | Tsunami | — | — | SC | AS215925 | 2026-09-21 | — |
| 178.128.167.82 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-21 | 2026-09-25 |
| 60.205.223.45 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 60.205.223.45 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 47.94.76.119 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 47.94.76.119 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 47.94.76.119 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 47.94.76.119 | 3389 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-21 | — |
| 45.192.204.42 | 7000 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-21 | — |
| 115.190.170.185 | 8084 | C2 | VShell | — | — | CN | AS137718 | 2026-09-21 | — |
| 91.107.159.216 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-21 | — |
| 91.107.157.201 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-21 | — |
| 91.107.150.39 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-21 | — |
| 2.29.59.97 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-21 | — |
| 46.29.26.61 | 443 | C2 | Vidar | — | — | TR | AS132359 | 2026-09-21 | — |
| 178.105.215.94 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-21 | — |
| 91.92.41.153 | 2404 | C2 | Remcos | — | — | BG | AS211443 | 2026-09-21 | 2026-09-27 |
| 150.158.51.67 | 8083 | C2 | VShell | — | — | CN | AS45090 | 2026-09-21 | — |
| 144.7.106.78 | 8085 | C2 | VShell | — | — | CN | AS4134 | 2026-09-21 | — |
| 114.132.91.156 | 8280 | C2 | VShell | — | — | CN | AS45090 | 2026-09-21 | — |
| 42.193.169.176 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-21 | — |
| 49.233.30.13 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-21 | — |
| 114.132.190.121 | 8080 | C2 | AdaptixC2 | — | — | CN | AS45090 | 2026-09-21 | — |
| 114.132.190.121 | 80 | C2 | AdaptixC2 | — | — | CN | AS45090 | 2026-09-21 | — |
| 114.132.190.121 | 443 | C2 | AdaptixC2 | — | — | CN | AS45090 | 2026-09-21 | — |
| 60.204.208.179 | 32122 | C2 | VShell | — | — | CN | AS55990 | 2026-09-21 | — |
| 103.212.186.151 | 80 | C2 | VShell | — | — | HK | AS401701 | 2026-09-21 | — |
| 8.145.60.56 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-21 | — |
| 177.5.67.37 | 8080 | C2 | Cobalt Strike | — | — | HK | AS137535 | 2026-09-21 | — |
| 177.5.67.37 | 80 | C2 | Cobalt Strike | — | — | HK | AS137535 | 2026-09-21 | — |
| 8.133.188.132 | 3389 | C2 | VShell | — | — | SG | AS37963 | 2026-09-21 | — |
| 193.178.158.107 | 80 | C2 | Amadey | — | — | RU | AS201738 | 2026-09-21 | 2026-09-27 |
| 89.126.221.170 | 8080 | C2 | AdaptixC2 | — | — | UZ | AS202660 | 2026-09-21 | — |
| 89.126.221.170 | 80 | C2 | AdaptixC2 | — | — | UZ | AS202660 | 2026-09-21 | — |
| 89.126.221.170 | 443 | C2 | AdaptixC2 | — | — | UZ | AS202660 | 2026-09-21 | — |
| 89.126.221.170 | 4433 | C2 | AdaptixC2 | — | — | UZ | AS202660 | 2026-09-21 | — |
| 81.70.21.163 | 8443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-21 | 2026-09-27 |
| 8.145.60.56 | 9001 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | — |
| 3.86.146.124 | 7443 | C2 | Unknown | — | — | US | AS14618 | 2026-09-20 | — |
| 45.192.204.42 | 6000 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 2096 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 2083 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 2053 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 8080 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 80 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |
| 45.192.204.42 | 443 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-20 | — |