| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 204.44.69.231 | 14646 | C2 | Remcos | — | — | US | AS36352 | 2026-09-16 | 2026-09-16 |
| 204.44.69.231 | 14644 | C2 | Remcos | — | — | US | AS36352 | 2026-09-16 | 2026-09-16 |
| 42.193.227.214 | 1002 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-16 | — |
| 156.239.224.131 | 80 | C2 | Cobalt Strike | — | — | SC | AS154321 | 2026-09-16 | 2026-09-22 |
| 168.245.203.109 | 3790 | C2 | Meterpreter | — | — | US | AS58580 | 2026-09-16 | — |
| 134.209.223.192 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-16 | 2026-09-22 |
| 45.77.68.157 | 7289 | C2 | Remus | — | — | US | AS20473 | 2026-09-16 | 2026-09-17 |
| 207.89.17.5 | 3389 | C2 | Havoc | — | — | GB | AS215428 | 2026-09-16 | — |
| 202.61.85.168 | 7800 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-09-16 | — |
| 202.61.85.168 | 7811 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-09-16 | — |
| 47.109.23.77 | 65530 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-16 | — |
| 45.61.170.191 | 8080 | C2 | Cobalt Strike | — | — | US | AS14956 | 2026-09-16 | — |
| 120.53.19.157 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-16 | — |
| 18.228.80.130 | 80 | C2 | WhiteSnake Stealer | — | — | US | AS16509 | 2026-09-16 | — |
| 120.53.19.157 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-16 | — |
| 45.76.191.22 | 8080 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-09-16 | — |
| 45.76.191.22 | 80 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-09-16 | — |
| 45.76.191.22 | 443 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-09-16 | — |
| 45.61.170.191 | 80 | C2 | Cobalt Strike | — | — | US | AS14956 | 2026-09-16 | 2026-09-22 |
| 45.61.170.191 | 443 | C2 | Cobalt Strike | — | — | US | AS14956 | 2026-09-16 | 2026-09-22 |
| 42.193.239.217 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-16 | 2026-09-22 |
| 129.204.196.251 | 2222 | C2 | VShell | — | — | CN | AS45090 | 2026-09-16 | — |
| 172.245.136.97 | 1000 | C2 | DCRat | — | — | US | AS36352 | 2026-09-16 | — |
| 175.43.223.203 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-09-16 | 2026-09-22 |
| 111.228.26.26 | 7777 | C2 | VShell | — | — | CN | AS141679 | 2026-09-16 | — |
| 5.104.86.108 | 8890 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-16 | — |
| 123.60.142.164 | 8082 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-16 | — |
| 123.60.142.164 | 8080 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-16 | — |
| 123.60.142.164 | 8081 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-16 | — |
| 123.60.142.164 | 80 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-16 | — |
| 123.60.142.164 | 443 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-16 | — |
| 123.60.142.164 | 22 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-09-15 | — |
| 47.81.57.227 | 22 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-09-15 | — |
| 47.81.57.227 | 8080 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-09-15 | — |
| 105.72.55.52 | 8080 | C2 | NjRAT | — | — | MA | AS36884 | 2026-09-15 | — |
| 47.81.57.227 | 443 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-09-15 | — |
| 5.104.86.108 | 8088 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-15 | — |
| 178.16.53.91 | 8443 | C2 | VShell | — | — | TR | AS202412 | 2026-09-15 | — |
| 89.190.158.37 | 911 | C2 | XWorm | — | — | US | AS204914 | 2026-09-15 | — |
| 2.56.165.152 | 7000 | C2 | XWorm | — | — | US | AS204914 | 2026-09-15 | — |
| 97.104.107.190 | 80 | C2 | XWorm | — | — | US | AS33363 | 2026-09-15 | — |
| 92.24.51.238 | 80 | C2 | XWorm | — | — | GB | AS13285 | 2026-09-15 | — |
| 197.83.232.19 | 80 | C2 | XWorm | — | — | ZA | AS20011 | 2026-09-15 | — |
| 182.187.139.200 | 8080 | C2 | XWorm | — | — | PK | AS17557 | 2026-09-15 | — |
| 85.204.125.75 | 1604 | C2 | Quasar RAT | — | — | RO | AS34450 | 2026-09-15 | — |
| 90.8.202.45 | 5452 | C2 | Remcos | — | — | FR | AS3215 | 2026-09-15 | — |
| 47.108.225.4 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 83.229.123.249 | 18082 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-15 | — |
| 158.247.202.60 | 22 | C2 | Havoc | — | — | JP | AS20473 | 2026-09-15 | — |
| 95.158.131.147 | 7443 | C2 | Unknown | — | — | BG | AS41313 | 2026-09-15 | 2026-09-22 |