| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 5.104.86.108 | 8889 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-14 | — |
| 5.104.86.108 | 8884 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-14 | — |
| 5.104.86.108 | 8881 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-14 | — |
| 206.237.13.242 | 8082 | C2 | AdaptixC2 | — | — | US | AS42960 | 2026-09-14 | — |
| 121.89.94.37 | 1443 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 123.57.30.209 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 82.26.66.179 | 6606 | C2 | AsyncRAT | — | — | GB | AS400897 | 2026-09-14 | 2026-09-21 |
| 45.192.214.54 | 56003 | C2 | PureRAT | — | — | SC | AS138995 | 2026-09-14 | 2026-09-21 |
| 217.60.76.250 | 6606 | C2 | AsyncRAT | — | — | AE | AS401626 | 2026-09-14 | 2026-09-21 |
| 207.89.17.5 | 443 | C2 | Havoc | — | — | GB | AS215428 | 2026-09-14 | 2026-09-21 |
| 198.44.167.14 | 443 | C2 | DanaBot | — | — | US | AS62610 | 2026-09-14 | 2026-09-21 |
| 188.212.158.203 | 6606 | C2 | AsyncRAT | — | — | NL | AS142299 | 2026-09-14 | 2026-09-21 |
| 185.212.129.79 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-09-14 | 2026-09-21 |
| 137.220.194.12 | 56003 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-14 | 2026-09-21 |
| 135.136.147.238 | 50 | C2 | AsyncRAT | — | — | SG | AS931 | 2026-09-14 | 2026-09-21 |
| 118.107.1.203 | 56003 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-14 | 2026-09-21 |
| 162.35.122.126 | 22 | C2 | Cobalt Strike | — | — | US | AS19318 | 2026-09-14 | — |
| 162.35.122.126 | 3389 | C2 | Cobalt Strike | — | — | US | AS19318 | 2026-09-14 | — |
| 2.27.62.208 | 4449 | C2 | PureLogs Stealer | — | — | US | AS200051 | 2026-09-14 | — |
| 207.90.237.165 | 443 | C2 | Jackskid | — | — | US | AS26383 | 2026-09-14 | 2026-09-16 |
| 207.90.237.163 | 443 | C2 | Jackskid | — | — | US | AS26383 | 2026-09-14 | 2026-09-16 |
| 207.90.237.47 | 443 | C2 | Jackskid | — | — | US | AS26383 | 2026-09-14 | 2026-09-16 |
| 207.90.237.254 | 443 | C2 | Jackskid | — | — | US | AS26383 | 2026-09-14 | 2026-09-16 |
| 207.90.237.23 | 443 | C2 | Jackskid | — | — | US | AS26383 | 2026-09-14 | 2026-09-16 |
| 102.220.160.198 | 5555 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-14 | 2026-09-20 |
| 162.35.122.126 | 8080 | C2 | Cobalt Strike | — | — | US | AS19318 | 2026-09-14 | — |
| 23.227.196.108 | 8080 | C2 | Cobalt Strike | — | — | US | AS29802 | 2026-09-14 | — |
| 23.227.196.108 | 80 | C2 | Cobalt Strike | — | — | US | AS29802 | 2026-09-14 | — |
| 203.202.232.16 | 2477 | C2 | XWorm | — | — | TR | AS44382 | 2026-09-14 | — |
| 158.94.210.194 | 6000 | C2 | XWorm | — | — | TR | AS202412 | 2026-09-14 | — |
| 162.35.122.126 | 80 | C2 | Cobalt Strike | — | — | US | AS19318 | 2026-09-14 | — |
| 149.104.75.117 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-14 | 2026-09-15 |
| 38.54.104.20 | 443 | C2 | Jackskid | — | — | US | AS154177 | 2026-09-14 | 2026-09-15 |
| 38.54.43.76 | 443 | C2 | Jackskid | — | — | US | AS138915 | 2026-09-14 | 2026-09-15 |
| 45.88.186.217 | 8899 | C2 | AdaptixC2 | — | — | NL | AS210558 | 2026-09-14 | — |
| 23.227.196.108 | 443 | C2 | Cobalt Strike | — | — | US | AS29802 | 2026-09-14 | — |
| 120.26.6.141 | 8848 | C2 | DCRat | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 114.215.188.153 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 114.215.188.153 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 1935 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.121.130.18 | 8443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 64.89.163.63 | 5173 | C2 | Overlord RAT | — | — | US | AS401626 | 2026-09-14 | 2026-09-15 |
| 152.42.182.175 | 6728 | C2 | Remus | — | — | US | AS14061 | 2026-09-14 | 2026-09-16 |
| 91.92.35.7 | 6969 | C2 | Bashlite | — | — | BG | AS209101 | 2026-09-14 | — |
| 114.215.188.153 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 114.215.188.153 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 115.159.72.17 | 8443 | C2 | VShell | — | — | CN | AS45090 | 2026-09-14 | — |
| 45.125.32.79 | 6699 | C2 | VShell | — | — | HK | AS55933 | 2026-09-14 | — |
| 45.86.230.112 | 4001 | C2 | SystemBC | — | — | EE | AS62240 | 2026-09-14 | 2026-09-15 |