| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.12.181.199 | 6969 | C2 | CECbot | — | — | US | AS197769 | 2026-09-18 | — |
| 94.154.43.235 | 443 | C2 | CECbot | — | — | UA | AS219502 | 2026-09-18 | — |
| 64.89.160.15 | 443 | C2 | CECbot | — | — | US | AS205759 | 2026-09-18 | — |
| 62.60.226.111 | 8080 | C2 | CECbot | — | — | IR | AS214351 | 2026-09-18 | — |
| 154.91.62.110 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.62.109 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.62.108 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.62.107 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 8.160.168.147 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-18 | — |
| 8.160.168.147 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-18 | — |
| 8.160.168.147 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-18 | — |
| 8.160.168.147 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-18 | — |
| 60.204.248.97 | 80 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-18 | 2026-09-21 |
| 80.76.49.209 | 443 | C2 | PureRAT | — | — | BG | AS399486 | 2026-09-18 | 2026-09-24 |
| 5.163.239.119 | 443 | C2 | Havoc | — | — | SA | AS25019 | 2026-09-18 | 2026-09-24 |
| 46.246.6.18 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-09-18 | 2026-09-24 |
| 45.202.0.55 | 8443 | C2 | DCRat | — | — | SC | AS4907 | 2026-09-18 | 2026-09-24 |
| 45.202.0.48 | 8443 | C2 | DCRat | — | — | SC | AS4907 | 2026-09-18 | 2026-09-24 |
| 45.139.104.26 | 55011 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-18 | 2026-09-24 |
| 45.139.104.222 | 55006 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-18 | 2026-09-24 |
| 45.139.104.222 | 443 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-18 | 2026-09-24 |
| 38.242.209.29 | 8080 | C2 | Havoc | — | — | US | AS51167 | 2026-09-18 | 2026-09-24 |
| 2.56.97.65 | 7443 | C2 | Unknown | — | — | DE | AS197540 | 2026-09-18 | 2026-09-24 |
| 191.107.92.58 | 9002 | C2 | DCRat | — | — | CO | AS3816 | 2026-09-18 | 2026-09-24 |
| 144.31.148.132 | 45051 | C2 | Hook | — | — | US | AS201988 | 2026-09-18 | 2026-09-24 |
| 109.205.212.241 | 80 | C2 | Havoc | — | — | AZ | AS50053 | 2026-09-18 | 2026-09-24 |
| 60.204.248.97 | 8080 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-18 | — |
| 60.204.248.97 | 443 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-18 | 2026-09-21 |
| 60.204.248.97 | 22 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-18 | — |
| 178.16.54.195 | 4782 | C2 | Quasar RAT | — | — | TR | AS202412 | 2026-09-18 | — |
| 49.232.21.222 | 3000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 45.207.219.134 | 3306 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 45.207.219.134 | 888 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 45.207.219.134 | 22 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 106.54.201.103 | 9999 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | 2026-09-24 |
| 81.70.21.163 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | 2026-09-24 |
| 45.207.219.134 | 8080 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | 2026-09-18 |
| 112.126.27.96 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-18 | — |
| 81.70.21.163 | 8000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | 2026-09-24 |
| 47.99.109.10 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-18 | — |
| 45.207.219.134 | 80 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 45.207.219.134 | 443 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 45.207.219.134 | 21 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 43.226.39.138 | 8080 | C2 | Cobalt Strike | — | — | CN | AS134762 | 2026-09-18 | — |
| 43.226.39.138 | 80 | C2 | Cobalt Strike | — | — | CN | AS134762 | 2026-09-18 | — |
| 176.65.139.219 | 9111 | C2 | Mirai | — | — | DE | AS219502 | 2026-09-18 | — |
| 43.226.39.138 | 443 | C2 | Cobalt Strike | — | — | CN | AS134762 | 2026-09-18 | — |
| 43.226.39.138 | 8081 | C2 | Cobalt Strike | — | — | CN | AS134762 | 2026-09-18 | — |
| 117.72.202.154 | 22 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-09-18 | — |
| 117.50.214.223 | 18084 | C2 | VShell | — | — | CN | AS23724 | 2026-09-18 | — |