| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 102.188.200.238 | 8848 | C2 | DCRat | — | — | EG | AS24835 | 2026-09-17 | 2026-09-23 |
| 199.47.241.52 | 7878 | C2 | Remcos | — | — | US | AS60781 | 2026-09-17 | 2026-09-23 |
| 43.157.63.92 | 9035 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 39.100.66.238 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 177.3.88.123 | 32425 | C2 | VShell | — | — | HK | AS137535 | 2026-09-17 | — |
| 38.242.151.91 | 22 | C2 | Havoc | — | — | US | AS51167 | 2026-09-17 | — |
| 39.100.66.238 | 81 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | 2026-09-22 |
| 117.72.202.154 | 80 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-09-17 | 2026-09-23 |
| 103.117.137.230 | 9999 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-09-17 | — |
| 121.43.194.200 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 124.221.4.84 | 8082 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 124.221.4.84 | 123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 124.221.4.84 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 124.221.4.84 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 124.221.4.84 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | — |
| 47.98.124.244 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 47.98.124.244 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 207.89.17.5 | 6001 | C2 | Havoc | — | — | GB | AS215428 | 2026-09-17 | — |
| 38.54.105.102 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 38.60.208.249 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 38.60.208.16 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 130.94.2.249 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 102.220.163.42 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-17 | — |
| 43.157.63.92 | 8001 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-23 |
| 43.155.214.112 | 8001 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-20 |
| 43.173.38.253 | 8001 | C2 | Aisuru | — | — | SG | AS132203 | 2026-09-17 | 2026-09-22 |
| 47.98.124.244 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 2.25.222.233 | 8899 | C2 | Remcos | — | — | LT | AS47583 | 2026-09-17 | — |
| 85.137.252.40 | 3000 | C2 | Unknown Stealer | — | — | GB | AS215428 | 2026-09-17 | — |
| 103.67.163.201 | 2404 | C2 | Remcos | — | — | VN | AS150895 | 2026-09-17 | 2026-09-23 |
| 87.120.219.207 | 80 | Payload | Unknown Loader | — | — | BG | AS215540 | 2026-09-17 | — |
| 94.154.43.235 | 10213 | C2 | CECbot | — | — | UA | AS219502 | 2026-09-17 | 2026-09-23 |
| 87.120.219.207 | 82 | Payload | Unknown Loader | — | — | BG | AS215540 | 2026-09-17 | — |
| 217.60.195.6 | 8443 | C2 | CECbot | — | — | AE | AS209373 | 2026-09-17 | — |
| 122.10.115.27 | 9999 | C2 | Cobalt Strike | — | — | HK | AS24544 | 2026-09-17 | — |
| 130.94.0.245 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 130.94.1.139 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 38.60.255.183 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 38.54.105.72 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 38.60.255.37 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-17 | — |
| 31.56.209.74 | 3231 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-17 | 2026-09-23 |
| 188.227.14.105 | 20000 | C2 | Cobalt Strike | — | — | RU | AS35000 | 2026-09-17 | — |
| 123.60.142.164 | 8088 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-17 | — |
| 123.56.124.3 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 123.56.124.3 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | 2026-09-17 |
| 123.56.124.3 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 123.56.124.3 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-17 | — |
| 45.192.248.45 | 4431 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-17 | 2026-09-23 |
| 45.192.248.45 | 443 | C2 | Cobalt Strike | — | — | SC | AS61112 | 2026-09-17 | 2026-09-23 |
| 43.138.153.161 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-17 | 2026-09-23 |