| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 49.232.21.222 | 22334 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 49.232.21.222 | 6379 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 177.5.67.37 | 443 | C2 | Cobalt Strike | — | — | HK | AS137535 | 2026-09-19 | 2026-09-25 |
| 156.238.233.131 | 50022 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-19 | 2026-09-25 |
| 106.53.168.218 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | 2026-09-25 |
| 49.232.21.222 | 3456 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 49.232.21.222 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 121.4.38.18 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | — |
| 114.215.190.7 | 65534 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | — |
| 114.215.190.7 | 19999 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | — |
| 114.215.190.7 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | — |
| 114.215.190.7 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | — |
| 114.215.190.7 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | — |
| 192.210.197.131 | 12313 | C2 | VShell | — | — | US | AS36352 | 2026-09-19 | — |
| 154.91.63.99 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.63.123 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.63.102 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.62.123 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.62.120 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.62.101 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.61.99 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.60.124 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.60.123 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 154.91.63.115 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |
| 42.193.169.176 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | 2026-09-25 |
| 91.92.241.149 | 9090 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-09-19 | 2026-09-25 |
| 91.92.241.149 | 7707 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-09-19 | 2026-09-25 |
| 64.84.56.233 | 443 | C2 | DanaBot | — | — | US | AS401362 | 2026-09-19 | 2026-09-25 |
| 217.60.195.193 | 56003 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-19 | 2026-09-25 |
| 217.60.195.193 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-19 | 2026-09-25 |
| 217.60.195.193 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-19 | 2026-09-25 |
| 209.38.224.48 | 7443 | C2 | Unknown | — | — | US | AS14061 | 2026-09-19 | 2026-09-25 |
| 188.137.227.133 | 8808 | C2 | AsyncRAT | — | — | NL | AS211381 | 2026-09-19 | 2026-09-25 |
| 181.206.118.219 | 5118 | C2 | DCRat | — | — | CO | AS13489 | 2026-09-19 | 2026-09-25 |
| 154.86.14.17 | 443 | C2 | DanaBot | — | — | SC | AS401362 | 2026-09-19 | 2026-09-25 |
| 154.216.139.17 | 443 | C2 | DanaBot | — | — | SC | AS152698 | 2026-09-19 | 2026-09-25 |
| 146.70.51.74 | 2512 | C2 | DCRat | — | — | RO | AS9009 | 2026-09-19 | 2026-09-25 |
| 138.0.191.215 | 9001 | C2 | DanaBot | — | — | BR | AS52838 | 2026-09-19 | 2026-09-25 |
| 137.184.139.185 | 8080 | C2 | PoshC2 | — | — | US | AS14061 | 2026-09-19 | 2026-09-25 |
| 128.241.244.7 | 12159 | C2 | DCRat | — | — | US | AS213802 | 2026-09-19 | 2026-09-25 |
| 128.241.244.3 | 8848 | C2 | DCRat | — | — | US | AS213802 | 2026-09-19 | 2026-09-25 |
| 128.241.244.3 | 12159 | C2 | DCRat | — | — | US | AS213802 | 2026-09-19 | 2026-09-25 |
| 102.220.160.198 | 7707 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-19 | 2026-09-25 |
| 47.122.120.188 | 81 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | 2026-09-20 |
| 101.34.208.175 | 8081 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | 2026-09-25 |
| 139.199.18.159 | 81 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-19 | 2026-09-22 |
| 35.215.160.200 | 80 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-09-19 | 2026-09-20 |
| 123.57.146.34 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | 2026-09-25 |
| 114.215.190.7 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-19 | 2026-09-19 |
| 154.91.63.113 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-19 | — |