| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 204.44.69.231 | 14643 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |
| 139.59.168.101 | 9034 | C2 | Aisuru | — | — | SG | AS14061 | 2026-09-15 | — |
| 155.103.71.126 | 4144 | C2 | Remcos | — | — | US | AS44382 | 2026-09-15 | 2026-09-18 |
| 217.60.195.246 | 2404 | C2 | Remcos | — | — | AE | AS209373 | 2026-09-15 | 2026-09-21 |
| 204.44.69.231 | 14645 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |
| 64.177.71.62 | 8443 | C2 | Aisuru | — | — | US | AS20473 | 2026-09-15 | 2026-09-15 |
| 204.44.69.231 | 14647 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |
| 107.172.63.161 | 2404 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-21 |
| 204.44.69.231 | 14648 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-16 |
| 137.220.205.196 | 80 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 137.220.205.196 | 443 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 137.220.205.181 | 8080 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 5.104.86.108 | 8090 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-15 | — |
| 185.199.196.177 | 1488 | C2 | Unknown | — | — | GB | AS213929 | 2026-09-15 | — |
| 137.220.205.181 | 80 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 137.220.205.181 | 443 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-15 | — |
| 47.108.225.4 | 8093 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 47.108.225.4 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 45.77.55.135 | 443 | C2 | Jackskid | — | — | US | AS20473 | 2026-09-15 | 2026-09-16 |
| 45.77.234.142 | 443 | C2 | Jackskid | — | — | US | AS20473 | 2026-09-15 | 2026-09-16 |
| 45.32.103.73 | 443 | C2 | Jackskid | — | — | US | AS20473 | 2026-09-15 | 2026-09-16 |
| 216.238.88.155 | 443 | C2 | Jackskid | — | — | US | AS20473 | 2026-09-15 | 2026-09-16 |
| 107.191.52.153 | 443 | C2 | Jackskid | — | — | US | AS20473 | 2026-09-15 | 2026-09-16 |
| 161.35.197.52 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-15 | 2026-09-21 |
| 130.94.29.101 | 8091 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-09-15 | 2026-09-21 |
| 150.40.98.194 | 4521 | C2 | LxBase RAT | — | — | HR | AS30893 | 2026-09-15 | — |
| 46.151.182.34 | 7007 | C2 | XWorm | — | — | NL | AS36680 | 2026-09-15 | — |
| 47.108.225.4 | 8082 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 47.108.225.4 | 8011 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 47.108.225.4 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 47.108.225.4 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-15 | — |
| 23.132.164.3 | 2404 | C2 | Remcos | — | — | US | AS401626 | 2026-09-15 | — |
| 192.255.195.140 | 2404 | C2 | Remcos | — | — | US | AS36352 | 2026-09-15 | 2026-09-21 |
| 45.155.69.81 | 8090 | C2 | Unknown | — | — | SC | AS214927 | 2026-09-15 | — |
| 45.155.69.81 | 8070 | C2 | Unknown | — | — | SC | AS214927 | 2026-09-15 | — |
| 31.58.171.101 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-15 | 2026-09-16 |
| 31.58.171.10 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-15 | 2026-09-16 |
| 31.58.171.61 | 443 | C2 | Jackskid | — | — | AE | AS56971 | 2026-09-15 | 2026-09-16 |
| 95.182.87.134 | 443 | C2 | Jackskid | — | — | CZ | AS211273 | 2026-09-15 | 2026-09-21 |
| 134.209.106.204 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-15 | 2026-09-20 |
| 134.209.223.192 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-15 | 2026-09-21 |
| 141.164.55.101 | 8443 | C2 | Aisuru | — | — | JP | AS20473 | 2026-09-15 | 2026-09-15 |
| 158.247.227.61 | 8443 | C2 | Aisuru | — | — | JP | AS20473 | 2026-09-15 | 2026-09-15 |
| 175.27.156.139 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-15 | — |
| 182.92.69.30 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-15 | — |
| 23.94.53.109 | 3232 | C2 | Unknown | — | — | US | AS36352 | 2026-09-15 | — |
| 5.104.86.108 | 8083 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-15 | — |
| 43.138.0.136 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-15 | — |
| 5.104.86.108 | 8891 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-15 | — |
| 147.90.182.29 | 2404 | C2 | Remcos | — | — | NL | AS210558 | 2026-09-15 | 2026-09-21 |