| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 95.158.131.142 | 7443 | C2 | Unknown | — | — | BG | AS41313 | 2026-09-15 | 2026-09-22 |
| 95.158.131.141 | 7443 | C2 | Unknown | — | — | BG | AS41313 | 2026-09-15 | 2026-09-22 |
| 95.158.131.139 | 7443 | C2 | Unknown | — | — | BG | AS41313 | 2026-09-15 | 2026-09-22 |
| 95.158.131.135 | 7443 | C2 | Unknown | — | — | BG | AS41313 | 2026-09-15 | 2026-09-22 |
| 94.26.81.135 | 443 | C2 | PureRAT | — | — | BG | AS209101 | 2026-09-15 | 2026-09-22 |
| 93.152.224.238 | 80 | C2 | Tsundere | — | — | BG | AS207043 | 2026-09-15 | 2026-09-22 |
| 85.239.149.73 | 80 | C2 | Tsundere | — | — | BG | AS207043 | 2026-09-15 | 2026-09-22 |
| 85.137.252.195 | 7443 | C2 | Unknown | — | — | GB | AS215428 | 2026-09-15 | 2026-09-22 |
| 82.26.66.136 | 6606 | C2 | AsyncRAT | — | — | GB | AS400897 | 2026-09-15 | 2026-09-22 |
| 82.146.37.83 | 3333 | C2 | Evilginx | — | — | RU | AS29182 | 2026-09-15 | 2026-09-22 |
| 80.76.49.129 | 56002 | C2 | PureRAT | — | — | BG | AS399486 | 2026-09-15 | 2026-09-22 |
| 80.76.49.129 | 56001 | C2 | PureRAT | — | — | BG | AS399486 | 2026-09-15 | 2026-09-22 |
| 77.90.14.60 | 80 | C2 | Mirai | — | — | DE | AS215039 | 2026-09-15 | 2026-09-22 |
| 67.205.148.159 | 443 | C2 | Unknown | — | — | US | AS14061 | 2026-09-15 | 2026-09-22 |
| 45.202.0.116 | 8848 | C2 | DCRat | — | — | SC | AS4907 | 2026-09-15 | 2026-09-22 |
| 31.76.125.3 | 56003 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-15 | 2026-09-22 |
| 31.76.125.3 | 56001 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-15 | 2026-09-22 |
| 31.76.125.3 | 443 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-15 | 2026-09-22 |
| 31.57.147.246 | 443 | C2 | PureRAT | — | — | AE | AS399486 | 2026-09-15 | 2026-09-22 |
| 213.111.149.141 | 3125 | C2 | Evilginx | — | — | PL | AS6698 | 2026-09-15 | 2026-09-22 |
| 208.84.103.159 | 443 | C2 | Havoc | — | — | US | AS206216 | 2026-09-15 | 2026-09-22 |
| 195.177.94.94 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-15 | 2026-09-22 |
| 195.177.94.4 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-15 | 2026-09-22 |
| 195.177.94.4 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-15 | 2026-09-22 |
| 193.25.215.83 | 56002 | C2 | PureRAT | — | — | US | AS397966 | 2026-09-15 | 2026-09-22 |
| 121.200.216.74 | 80 | C2 | AsyncRAT | — | — | VN | AS154247 | 2026-09-15 | 2026-09-22 |
| 118.107.1.203 | 56002 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-15 | 2026-09-22 |
| 118.107.1.203 | 56001 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-15 | 2026-09-22 |
| 102.220.163.36 | 2502 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-15 | 2026-09-22 |
| 102.117.167.205 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-15 | 2026-09-22 |
| 158.247.202.60 | 2455 | C2 | Havoc | — | — | JP | AS20473 | 2026-09-15 | — |
| 198.23.137.75 | 6564 | C2 | VShell | — | — | US | AS36352 | 2026-09-15 | — |
| 178.16.53.91 | 8081 | C2 | VShell | — | — | TR | AS202412 | 2026-09-15 | — |
| 118.253.150.244 | 8084 | C2 | VShell | — | — | CN | AS63835 | 2026-09-15 | — |
| 8.148.27.183 | 12050 | C2 | NjRAT | — | — | SG | AS37963 | 2026-09-15 | — |
| 81.70.169.229 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-15 | — |
| 8.146.227.247 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-15 | — |
| 8.146.227.247 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-15 | — |
| 8.146.227.247 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-15 | — |
| 159.203.178.139 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-15 | 2026-09-21 |
| 141.164.55.101 | 8080 | C2 | Aisuru | — | — | JP | AS20473 | 2026-09-15 | — |
| 8.146.227.247 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-15 | 2026-09-21 |
| 8.146.227.247 | 8090 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-15 | 2026-09-17 |
| 47.108.225.4 | 3306 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 47.108.225.4 | 8888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 45.86.64.228 | 7000 | C2 | Cobalt Strike | — | — | CY | AS212171 | 2026-09-15 | — |
| 137.220.205.196 | 8080 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 204.44.69.231 | 14641 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |
| 128.90.122.253 | 2015 | C2 | Remcos | — | — | US | AS40861 | 2026-09-15 | 2026-09-16 |
| 204.44.69.231 | 14649 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |