| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 94.232.46.202 | 4321 | C2 | SystemBC | — | — | KG | AS64439 | 2026-09-14 | 2026-09-15 |
| 109.206.240.95 | 7000 | C2 | XWorm | — | — | — | — | 2026-09-14 | — |
| 188.137.255.18 | 6000 | C2 | XWorm | — | — | NL | AS211381 | 2026-09-14 | — |
| 130.12.181.118 | 7000 | C2 | XWorm | — | — | US | AS197769 | 2026-09-14 | — |
| 185.255.93.201 | 1604 | C2 | Quasar RAT | — | — | TR | AS209604 | 2026-09-14 | — |
| 31.57.184.6 | 2404 | C2 | Remcos | — | — | AE | AS197769 | 2026-09-14 | 2026-09-20 |
| 180.184.46.116 | 10074 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-09-14 | 2026-09-20 |
| 120.53.19.157 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | 2026-09-20 |
| 101.201.103.158 | 8066 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | 2026-09-20 |
| 103.124.101.68 | 80 | C2 | Ghost RAT | — | — | KR | AS9318 | 2026-09-14 | — |
| 1.14.76.115 | 9999 | C2 | VShell | — | — | CN | AS45090 | 2026-09-14 | — |
| 167.172.142.69 | 80 | C2 | Havoc | — | — | US | AS14061 | 2026-09-14 | — |
| 165.227.142.229 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-14 | — |
| 158.94.209.216 | 3389 | C2 | Remcos | — | — | TR | AS202412 | 2026-09-14 | 2026-09-14 |
| 198.23.185.239 | 80 | C2 | Ghost RAT | — | — | US | AS63025 | 2026-09-14 | — |
| 139.196.174.152 | 61616 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 8888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | 2026-09-18 |
| 139.196.174.152 | 82 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 155.103.69.85 | 2672 | C2 | Remcos | — | — | US | AS44382 | 2026-09-14 | 2026-09-17 |
| 147.124.212.137 | 34214 | C2 | Remcos | — | — | US | AS396073 | 2026-09-14 | 2026-09-19 |
| 192.162.199.242 | 5000 | C2 | Remcos | — | — | NL | AS214351 | 2026-09-14 | 2026-09-20 |
| 206.123.137.141 | 56090 | C2 | Remcos | — | — | US | AS9009 | 2026-09-14 | 2026-09-14 |
| 31.6.50.206 | 2017 | C2 | XWorm | — | — | US | AS213200 | 2026-09-14 | 2026-09-14 |
| 45.154.98.150 | 2404 | C2 | Remcos | — | — | BE | AS210558 | 2026-09-14 | — |
| 185.98.170.23 | 60632 | C2 | Remcos | — | — | CH | AS212238 | 2026-09-14 | — |
| 211.154.24.247 | 4462 | C2 | DCRat | — | — | CN | AS146817 | 2026-09-14 | — |
| 124.72.180.167 | 8848 | C2 | DCRat | — | — | CN | AS4134 | 2026-09-14 | — |
| 124.72.180.167 | 55130 | C2 | DCRat | — | — | CN | AS4134 | 2026-09-14 | — |
| 5.61.208.88 | 8888 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 80 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 7879 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 7788 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 443 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 3577 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 3306 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 22 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 5.61.208.88 | 21 | C2 | AsyncRAT | — | — | SC | AS206264 | 2026-09-14 | — |
| 26.6.214.74 | 8808 | C2 | AsyncRAT | — | — | US | AS749 | 2026-09-14 | — |
| 26.6.214.74 | 7707 | C2 | AsyncRAT | — | — | US | AS749 | 2026-09-14 | — |
| 26.6.214.74 | 6606 | C2 | AsyncRAT | — | — | US | AS749 | 2026-09-14 | — |
| 192.236.229.110 | 8888 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 80 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 7879 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 7788 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 443 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 3577 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 3306 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |
| 192.236.229.110 | 22 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-09-14 | — |