| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 132.145.126.82 | 50050 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-09-14 | — |
| 158.101.136.18 | 50050 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-09-14 | — |
| 43.155.208.21 | 50050 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-14 | — |
| 46.235.168.54 | 50050 | C2 | Cobalt Strike | — | — | GB | AS13009 | 2026-09-14 | — |
| 217.154.212.25 | 50050 | C2 | Cobalt Strike | — | — | DE | AS8560 | 2026-09-14 | 2026-09-16 |
| 45.192.202.36 | 50050 | C2 | Cobalt Strike | — | — | SC | AS401615 | 2026-09-14 | 2026-09-14 |
| 8.222.147.42 | 50050 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-09-14 | — |
| 96.244.108.74 | 50050 | C2 | Cobalt Strike | — | — | US | AS701 | 2026-09-14 | — |
| 42.194.241.92 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | 2026-09-16 |
| 142.93.51.224 | 50050 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-09-14 | 2026-09-14 |
| 167.17.47.252 | 50050 | C2 | Cobalt Strike | — | — | AE | AS43180 | 2026-09-14 | — |
| 46.235.168.58 | 50050 | C2 | Cobalt Strike | — | — | GB | AS13009 | 2026-09-14 | — |
| 192.226.192.160 | 50050 | C2 | Cobalt Strike | — | — | CA | AS5769 | 2026-09-14 | — |
| 95.182.114.29 | 50050 | C2 | Cobalt Strike | — | — | CZ | AS56971 | 2026-09-14 | 2026-09-14 |
| 192.144.146.191 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | — |
| 182.255.91.197 | 50050 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-09-14 | — |
| 118.89.79.131 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | 2026-09-14 |
| 1.15.76.39 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | 2026-09-16 |
| 115.190.250.28 | 50050 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-09-14 | — |
| 47.93.159.68 | 50050 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 45.86.64.228 | 50050 | C2 | Cobalt Strike | — | — | CY | AS212171 | 2026-09-14 | 2026-09-14 |
| 106.15.10.2 | 50050 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | 2026-09-16 |
| 124.222.28.189 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | 2026-09-14 |
| 124.220.59.145 | 50050 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | — |
| 64.90.17.181 | 50050 | C2 | Cobalt Strike | — | — | HK | AS979 | 2026-09-14 | — |
| 8.219.220.240 | 443 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-09-14 | — |
| 167.17.47.252 | 443 | C2 | Cobalt Strike | — | — | AE | AS43180 | 2026-09-14 | 2026-09-14 |
| 139.196.174.152 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 139.196.174.152 | 81 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.94.175.23 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 43.166.202.32 | 8317 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-14 | — |
| 43.166.202.32 | 8080 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-14 | — |
| 82.26.66.179 | 55555 | C2 | AsyncRAT | — | — | GB | AS400897 | 2026-09-14 | 2026-09-20 |
| 45.207.241.27 | 8848 | C2 | DCRat | — | — | SC | AS54801 | 2026-09-14 | 2026-09-20 |
| 193.8.187.10 | 80 | C2 | BianLian | — | — | BG | AS206378 | 2026-09-14 | 2026-09-20 |
| 192.169.176.54 | 40056 | C2 | Sliver | — | — | US | AS398101 | 2026-09-14 | 2026-09-20 |
| 192.162.199.179 | 7707 | C2 | AsyncRAT | — | — | NL | AS214351 | 2026-09-14 | 2026-09-20 |
| 185.34.147.34 | 8443 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-09-14 | 2026-09-20 |
| 185.34.147.33 | 8443 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-09-14 | 2026-09-20 |
| 185.34.147.32 | 8443 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-09-14 | 2026-09-20 |
| 185.34.147.31 | 8443 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-09-14 | 2026-09-20 |
| 161.248.179.92 | 8080 | C2 | AsyncRAT | — | — | VN | AS150895 | 2026-09-14 | 2026-09-20 |
| 154.214.2.223 | 443 | C2 | DanaBot | — | — | SC | AS152698 | 2026-09-14 | 2026-09-20 |
| 149.30.222.243 | 7707 | C2 | AsyncRAT | — | — | US | AS133199 | 2026-09-14 | 2026-09-20 |
| 144.172.106.62 | 2030 | C2 | Evilginx | — | — | US | AS14956 | 2026-09-14 | 2026-09-20 |
| 135.136.147.238 | 8808 | C2 | AsyncRAT | — | — | SG | AS931 | 2026-09-14 | 2026-09-20 |
| 130.94.42.202 | 4321 | C2 | AdaptixC2 | — | — | US | AS154177 | 2026-09-14 | 2026-09-20 |
| 104.164.46.36 | 10443 | C2 | Havoc | — | — | US | AS14315 | 2026-09-14 | 2026-09-20 |
| 102.220.160.198 | 6666 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-14 | 2026-09-20 |
| 89.106.83.137 | 4242 | C2 | PureLogs Stealer | — | — | DE | AS200051 | 2026-09-14 | — |