| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 209.38.100.69 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-09-17 | — |
| 3.110.54.253 | 7443 | C2 | Unknown | — | — | US | AS16509 | 2026-09-17 | — |
| 216.9.225.24 | 14649 | C2 | Remcos | — | — | US | AS44382 | 2026-09-17 | — |
| 107.172.13.250 | 8448 | C2 | Remcos | — | — | US | AS36352 | 2026-09-17 | 2026-09-18 |
| 188.166.254.199 | 443 | C2 | Havoc | — | — | US | AS14061 | 2026-09-17 | 2026-09-23 |
| 188.166.254.199 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-09-17 | — |
| 189.141.53.203 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-09-17 | 2026-09-23 |
| 31.56.36.214 | 4521 | C2 | LxBase RAT | — | — | AE | AS60781 | 2026-09-17 | — |
| 191.101.130.75 | 7731 | C2 | XWorm | — | — | AE | AS396073 | 2026-09-17 | — |
| 45.192.248.45 | 8080 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-17 | — |
| 45.192.248.45 | 80 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-17 | — |
| 132.243.235.146 | 443 | C2 | Unknown | — | — | CY | AS57043 | 2026-09-17 | — |
| 95.40.252.4 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 95.40.197.134 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 95.40.173.114 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 43.199.50.206 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 43.198.213.132 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 43.198.123.255 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.167.189.134 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.167.107.230 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.166.222.99 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.166.206.182 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.166.189.193 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 18.162.174.63 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 16.163.175.60 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 16.162.108.128 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-17 | — |
| 217.60.195.161 | 8001 | C2 | Aisuru | — | — | AE | AS209373 | 2026-09-17 | 2026-09-23 |
| 104.245.107.22 | 5433 | C2 | Remcos | — | — | US | AS27176 | 2026-09-17 | 2026-09-18 |
| 43.157.63.92 | 37215 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-21 |
| 176.65.139.231 | 8000 | C2 | SparkRAT | — | — | DE | AS219502 | 2026-09-17 | — |
| 45.192.248.45 | 22 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-17 | — |
| 193.160.32.138 | 8888 | C2 | Cobalt Strike | — | — | US | AS206216 | 2026-09-17 | — |
| 146.56.245.187 | 80 | C2 | VShell | — | — | CN | AS45090 | 2026-09-17 | — |
| 49.232.21.222 | 8081 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | 2026-09-23 |
| 154.219.101.56 | 8080 | C2 | Cobalt Strike | — | — | SC | AS401696 | 2026-09-17 | 2026-09-23 |
| 119.29.98.15 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | 2026-09-23 |
| 43.157.63.92 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-20 |
| 144.172.117.212 | 443 | C2 | Unknown RAT | — | — | US | AS14956 | 2026-09-17 | — |
| 172.86.123.51 | 443 | C2 | Unknown RAT | — | — | US | AS14956 | 2026-09-17 | — |
| 141.11.139.233 | 8081 | C2 | VShell | — | — | FR | AS212336 | 2026-09-17 | — |
| 119.3.156.192 | 8084 | C2 | VShell | — | — | CN | AS55990 | 2026-09-17 | — |
| 43.251.227.131 | 8084 | C2 | VShell | — | — | HK | AS401696 | 2026-09-17 | — |
| 8.148.187.55 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-17 | — |
| 43.156.82.233 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 129.226.82.94 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.156.47.240 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.155.204.228 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.130.251.228 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.157.198.200 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.157.181.156 | 443 | C2 | Jackskid | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |