| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 179.199.143.63 | 7443 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 51.210.52.212 | 1224 | C2 | BeaverTail | — | — | FR | AS16276 | 2026-09-18 | — |
| 172.86.126.227 | 8087 | C2 | Unknown | — | — | US | AS14956 | 2026-09-18 | — |
| 172.86.126.227 | 8086 | C2 | Unknown | — | — | US | AS14956 | 2026-09-18 | — |
| 172.86.126.227 | 8085 | C2 | Unknown | — | — | US | AS14956 | 2026-09-18 | — |
| 138.226.247.152 | 80 | C2 | OtterCookie | — | — | PL | AS43641 | 2026-09-18 | — |
| 43.157.63.92 | 34567 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-18 | 2026-09-23 |
| 185.215.151.15 | 8089 | C2 | Remcos | — | — | CA | AS135392 | 2026-09-18 | 2026-09-23 |
| 187.52.119.59 | 8080 | C2 | Cobalt Strike | — | — | LT | AS47583 | 2026-09-18 | — |
| 187.52.119.59 | 80 | C2 | Cobalt Strike | — | — | LT | AS47583 | 2026-09-18 | — |
| 187.52.119.59 | 443 | C2 | Cobalt Strike | — | — | LT | AS47583 | 2026-09-18 | — |
| 117.72.202.154 | 8080 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-09-18 | — |
| 43.136.93.107 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | 2026-09-23 |
| 77.232.37.55 | 443 | C2 | Jackskid | — | — | RU | AS212441 | 2026-09-18 | 2026-09-24 |
| 185.173.39.2 | 443 | C2 | Jackskid | — | — | RU | AS212441 | 2026-09-18 | 2026-09-24 |
| 77.232.41.119 | 443 | C2 | Jackskid | — | — | RU | AS212441 | 2026-09-18 | 2026-09-24 |
| 185.173.38.47 | 443 | C2 | Jackskid | — | — | RU | AS212441 | 2026-09-18 | 2026-09-24 |
| 77.232.42.76 | 443 | C2 | Jackskid | — | — | RU | AS212441 | 2026-09-18 | 2026-09-24 |
| 164.92.207.173 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-18 | — |
| 117.72.202.154 | 443 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-09-18 | — |
| 154.219.101.56 | 18881 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 154.219.101.56 | 8443 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 154.219.101.56 | 8056 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 154.219.101.56 | 443 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 154.219.101.56 | 80 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-18 | — |
| 130.94.30.47 | 8088 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-18 | 2026-09-18 |
| 130.94.30.47 | 8080 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-18 | — |
| 130.94.30.47 | 80 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-18 | — |
| 130.94.30.47 | 443 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-18 | — |
| 130.94.30.47 | 22 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-18 | — |
| 115.159.101.177 | 33060 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 8086 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 3306 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 115.159.101.177 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 167.172.133.4 | 6527 | C2 | Remus | — | — | US | AS14061 | 2026-09-18 | 2026-09-22 |
| 49.232.21.222 | 8085 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 49.232.21.222 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 49.232.21.222 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-18 | — |
| 47.98.177.11 | 1443 | C2 | VShell | — | — | CN | AS37963 | 2026-09-18 | — |
| 49.232.21.222 | 8083 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 39.107.139.26 | 8089 | C2 | VShell | — | — | CN | AS37963 | 2026-09-17 | — |
| 141.11.139.233 | 80 | C2 | VShell | — | — | FR | AS212336 | 2026-09-17 | — |
| 47.129.3.232 | 4433 | C2 | VShell | — | — | US | AS16509 | 2026-09-17 | — |
| 192.210.197.13 | 12313 | C2 | VShell | — | — | US | AS36352 | 2026-09-17 | — |
| 185.193.126.143 | 8084 | C2 | VShell | — | — | RO | AS39287 | 2026-09-17 | — |
| 107.148.78.97 | 9000 | C2 | VShell | — | — | US | AS394432 | 2026-09-17 | — |
| 124.222.77.67 | 8018 | C2 | VShell | — | — | CN | AS45090 | 2026-09-17 | — |