| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 52.233.89.176 | 443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-20 | — |
| 34.62.248.68 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 158.94.208.220 | 443 | C2 | Unknown | — | — | TR | AS202412 | 2026-09-20 | — |
| 131.123.34.214 | 443 | C2 | Unknown | — | — | MD | AS200019 | 2026-09-20 | — |
| 45.148.10.5 | 443 | C2 | Unknown | — | — | RO | AS48090 | 2026-09-20 | — |
| 23.234.92.80 | 443 | C2 | Unknown | — | — | US | AS11878 | 2026-09-20 | — |
| 117.175.146.46 | 443 | C2 | Unknown | — | — | CN | AS9808 | 2026-09-20 | — |
| 91.239.78.39 | 443 | C2 | Unknown | — | — | PL | AS6698 | 2026-09-20 | — |
| 223.185.33.174 | 443 | C2 | Unknown | — | — | IN | AS24560 | 2026-09-20 | — |
| 34.52.133.111 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 34.62.82.165 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 34.52.229.253 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 34.77.137.207 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 34.89.51.39 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 34.92.112.189 | 443 | C2 | Unknown | — | — | US | AS396982 | 2026-09-20 | — |
| 123.57.146.34 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-20 | — |
| 123.57.146.34 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-20 | — |
| 47.121.130.18 | 18081 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-20 | — |
| 8.145.60.56 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | — |
| 47.238.116.190 | 3232 | C2 | Unknown | — | — | US | AS45102 | 2026-09-20 | — |
| 130.94.66.224 | 7443 | C2 | Unknown | — | — | US | AS154177 | 2026-09-20 | — |
| 8.145.60.56 | 8088 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | — |
| 144.217.94.121 | 1339 | C2 | XWorm | — | — | CA | AS16276 | 2026-09-20 | — |
| 159.65.83.2 | 12345 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | — |
| 8.145.60.56 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | — |
| 8.145.60.56 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | — |
| 139.199.18.159 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 139.199.18.159 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 8.145.60.56 | 81 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-20 | 2026-09-22 |
| 139.199.18.159 | 8000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 198.177.124.177 | 7289 | C2 | Remus | — | — | US | AS22612 | 2026-09-20 | 2026-09-20 |
| 94.183.235.159 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-20 | 2026-09-26 |
| 94.183.235.11 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-20 | 2026-09-26 |
| 92.119.158.39 | 443 | C2 | Jackskid | — | — | IN | AS207704 | 2026-09-20 | 2026-09-26 |
| 144.126.224.25 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-22 |
| 94.183.235.249 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-20 | 2026-09-26 |
| 46.101.36.181 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-20 |
| 43.173.38.253 | 8080 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-20 | 2026-09-23 |
| 139.199.18.159 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 139.199.18.159 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 124.223.177.82 | 8088 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 124.223.177.82 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 124.223.177.82 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 62.164.177.14 | 22235 | C2 | Cobalt Strike | — | — | DE | AS215929 | 2026-09-20 | 2026-09-26 |
| 209.99.186.180 | 443 | C2 | Cobalt Strike | — | — | KN | AS402253 | 2026-09-20 | 2026-09-26 |
| 8.146.227.247 | 8092 | C2 | VShell | — | — | SG | AS37963 | 2026-09-20 | — |
| 8.133.188.132 | 1433 | C2 | VShell | — | — | SG | AS37963 | 2026-09-20 | — |
| 64.118.128.131 | 8084 | C2 | VShell | — | — | HK | AS138997 | 2026-09-20 | — |
| 106.54.201.103 | 8000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 166.88.77.149 | 8084 | C2 | VShell | — | — | US | AS149440 | 2026-09-20 | — |