| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 45.86.64.228 | 8080 | C2 | Cobalt Strike | — | — | CY | AS212171 | 2026-09-14 | 2026-09-15 |
| 43.166.202.32 | 443 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-14 | — |
| 43.166.202.32 | 22 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-14 | — |
| 217.154.212.25 | 3389 | C2 | Cobalt Strike | — | — | DE | AS8560 | 2026-09-14 | — |
| 87.58.201.21 | 6678 | C2 | Mirai | — | — | NL | AS218731 | 2026-09-14 | — |
| 95.216.174.89 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 62.238.25.40 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 46.29.26.69 | 443 | C2 | Vidar | — | — | TR | AS132359 | 2026-09-14 | — |
| 62.238.98.77 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 46.62.145.171 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 46.62.138.14 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 77.42.18.24 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 62.238.22.252 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 2.29.21.253 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-14 | — |
| 95.133.228.51 | 443 | Payload | FAKEUPDATES | — | — | DE | AS219399 | 2026-09-14 | — |
| 217.154.212.25 | 22 | C2 | Cobalt Strike | — | — | DE | AS8560 | 2026-09-14 | — |
| 47.103.114.97 | 8103 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.109.176.249 | 3389 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 209.200.252.43 | 8084 | C2 | VShell | — | — | US | AS212238 | 2026-09-14 | — |
| 192.187.118.179 | 8084 | C2 | VShell | — | — | US | AS33387 | 2026-09-14 | — |
| 164.92.152.141 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 157.245.76.251 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 167.172.45.217 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 167.172.32.113 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 178.62.244.142 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 167.99.219.230 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 206.189.111.119 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 188.166.35.43 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 188.166.100.18 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 212.193.31.145 | 25001 | C2 | Kimwolf | — | — | CZ | AS202799 | 2026-09-14 | 2026-09-20 |
| 209.38.37.114 | 25001 | C2 | Kimwolf | — | — | US | AS14061 | 2026-09-14 | 2026-09-20 |
| 89.19.223.49 | 25001 | C2 | Kimwolf | — | — | RU | AS202799 | 2026-09-14 | 2026-09-20 |
| 85.234.91.247 | 25001 | C2 | Kimwolf | — | — | LU | AS59437 | 2026-09-14 | 2026-09-20 |
| 91.224.92.203 | 25001 | C2 | Kimwolf | — | — | GB | AS209605 | 2026-09-14 | 2026-09-20 |
| 74.201.173.189 | 15702 | C2 | Remcos | — | — | US | AS32475 | 2026-09-14 | 2026-09-18 |
| 155.103.69.85 | 2671 | C2 | Remcos | — | — | US | AS44382 | 2026-09-14 | 2026-09-17 |
| 155.103.70.196 | 2404 | C2 | Remcos | — | — | US | AS44382 | 2026-09-14 | — |
| 130.12.182.234 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-09-14 | 2026-09-14 |
| 108.165.185.204 | 2404 | C2 | Remcos | — | — | US | AS14315 | 2026-09-14 | 2026-09-14 |
| 130.12.182.217 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-09-14 | — |
| 46.151.182.237 | 9090 | C2 | Remcos | — | — | NL | AS36680 | 2026-09-14 | 2026-09-20 |
| 16.5.7.159 | 22 | C2 | Havoc | — | — | US | AS219008 | 2026-09-14 | — |
| 193.178.158.55 | 80 | C2 | Stealc | — | — | RU | AS201738 | 2026-09-14 | — |
| 155.103.69.85 | 2670 | C2 | Remcos | — | — | US | AS44382 | 2026-09-14 | 2026-09-17 |
| 172.245.209.188 | 2556 | C2 | Remcos | — | — | US | AS36352 | 2026-09-14 | 2026-09-20 |
| 45.192.105.32 | 18084 | C2 | VShell | — | — | SC | AS401701 | 2026-09-14 | — |
| 45.87.173.129 | 443 | C2 | Quasar RAT | — | — | LT | AS210538 | 2026-09-14 | — |
| 103.212.186.12 | 8085 | C2 | VShell | — | — | HK | AS401701 | 2026-09-14 | — |
| 103.212.186.12 | 80 | C2 | VShell | — | — | HK | AS401701 | 2026-09-14 | — |
| 167.172.147.77 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-14 | — |