| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 145.249.115.184 | 3478 | C2 | Ngioweb | — | — | RU | AS215540 | 2026-09-20 | — |
| 43.155.214.112 | 8443 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-20 | 2026-09-20 |
| 178.128.167.82 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-26 |
| 124.223.177.82 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | 2026-09-21 |
| 168.245.203.185 | 3790 | C2 | Meterpreter | — | — | US | AS58580 | 2026-09-20 | — |
| 168.245.203.180 | 3790 | C2 | Meterpreter | — | — | US | AS58580 | 2026-09-20 | — |
| 167.71.45.235 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-22 |
| 144.126.234.230 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-23 |
| 159.65.83.2 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-21 |
| 103.170.217.184 | 8787 | C2 | Unknown | — | — | IN | AS149020 | 2026-09-20 | — |
| 138.68.168.41 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-20 | 2026-09-22 |
| 36.255.97.162 | 443 | C2 | Cobalt Strike | — | — | PK | AS36680 | 2026-09-20 | — |
| 49.232.21.222 | 888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 121.200.216.74 | 8808 | C2 | AsyncRAT | — | — | VN | AS154247 | 2026-09-20 | — |
| 81.70.21.163 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 81.70.21.163 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 81.70.21.163 | 8091 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | 2026-09-26 |
| 106.54.201.103 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 106.54.201.103 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 106.54.201.103 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 43.136.93.107 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 154.91.63.109 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-20 | — |
| 43.136.93.107 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 123.207.246.48 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-20 | — |
| 154.91.62.103 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-20 | — |
| 154.91.59.115 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-20 | — |
| 154.91.59.114 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-20 | — |
| 154.91.57.126 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-20 | — |
| 154.12.37.146 | 8084 | C2 | VShell | — | — | US | AS35251 | 2026-09-20 | — |
| 49.232.21.222 | 88 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-20 | — |
| 101.43.31.60 | 123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 68.64.177.24 | 80 | C2 | AdaptixC2 | — | — | US | AS139659 | 2026-09-19 | — |
| 68.64.177.24 | 443 | C2 | AdaptixC2 | — | — | US | AS139659 | 2026-09-19 | — |
| 43.248.172.115 | 1443 | C2 | ValleyRAT | — | — | SG | AS4907 | 2026-09-19 | — |
| 94.154.32.189 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-19 | 2026-09-26 |
| 94.154.32.189 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-19 | 2026-09-26 |
| 94.154.32.189 | 443 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-19 | 2026-09-26 |
| 91.92.241.149 | 90 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-09-19 | 2026-09-26 |
| 89.106.83.225 | 56003 | C2 | PureRAT | — | — | DE | AS200051 | 2026-09-19 | 2026-09-26 |
| 89.106.83.225 | 56002 | C2 | PureRAT | — | — | DE | AS200051 | 2026-09-19 | 2026-09-26 |
| 89.106.83.225 | 56001 | C2 | PureRAT | — | — | DE | AS200051 | 2026-09-19 | 2026-09-26 |
| 67.43.56.25 | 6606 | C2 | AsyncRAT | — | — | US | AS3223 | 2026-09-19 | 2026-09-26 |
| 64.89.161.92 | 56002 | C2 | PureRAT | — | — | US | AS36680 | 2026-09-19 | 2026-09-26 |
| 51.222.87.92 | 8089 | C2 | Havoc | — | — | CA | AS16276 | 2026-09-19 | 2026-09-26 |
| 5.230.155.140 | 56003 | C2 | PureRAT | — | — | DE | AS12586 | 2026-09-19 | 2026-09-26 |
| 45.88.91.165 | 443 | C2 | PureRAT | — | — | BG | AS399486 | 2026-09-19 | 2026-09-26 |
| 45.139.104.26 | 56016 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-19 | 2026-09-26 |
| 43.135.26.173 | 56003 | C2 | PureRAT | — | — | SG | AS132203 | 2026-09-19 | 2026-09-26 |
| 43.135.26.173 | 56001 | C2 | PureRAT | — | — | SG | AS132203 | 2026-09-19 | 2026-09-26 |
| 31.56.209.53 | 5353 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-19 | 2026-09-26 |