| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 47.81.57.227 | 80 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-09-14 | 2026-09-15 |
| 149.30.232.29 | 9988 | C2 | Cobalt Strike | — | — | US | AS133199 | 2026-09-14 | — |
| 35.212.136.13 | 443 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-09-14 | — |
| 160.119.66.206 | 80 | C2 | Unknown | — | — | SC | AS49870 | 2026-09-14 | — |
| 139.59.143.6 | 34567 | C2 | Aisuru | — | — | SG | AS14061 | 2026-09-14 | — |
| 104.248.156.16 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-09-14 | — |
| 8.145.61.81 | 3000 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-14 | — |
| 8.145.61.81 | 8084 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-14 | — |
| 107.152.44.169 | 5432 | C2 | DCRat | — | — | US | AS11878 | 2026-09-14 | — |
| 8.145.61.81 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-14 | — |
| 8.145.61.81 | 8083 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-14 | — |
| 212.87.199.197 | 9090 | C2 | Cobalt Strike | — | — | TR | AS44620 | 2026-09-14 | — |
| 137.220.205.193 | 5566 | C2 | Cobalt Strike | — | — | SG | AS152194 | 2026-09-14 | 2026-09-20 |
| 118.175.159.92 | 8271 | C2 | Remus | — | — | TH | AS23969 | 2026-09-14 | 2026-09-14 |
| 46.151.182.6 | 9090 | C2 | Remcos | — | — | NL | AS36680 | 2026-09-14 | 2026-09-20 |
| 8.145.61.81 | 888 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-14 | — |
| 152.136.253.101 | 3389 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-14 | — |
| 47.121.130.18 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.121.130.18 | 6099 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 43.229.114.114 | 6669 | C2 | ValleyRAT | — | — | US | AS138415 | 2026-09-14 | — |
| 47.121.130.18 | 3001 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.121.130.18 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.121.130.18 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-14 | — |
| 23.94.53.109 | 22 | C2 | Unknown | — | — | US | AS36352 | 2026-09-14 | — |
| 83.229.123.249 | 8086 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-14 | — |
| 23.94.53.109 | 8888 | C2 | Unknown | — | — | US | AS36352 | 2026-09-14 | — |
| 198.13.158.57 | 22 | C2 | Havoc | — | — | US | AS399629 | 2026-09-14 | — |
| 187.101.57.177 | 1177 | C2 | NjRAT | — | — | BR | AS27699 | 2026-09-14 | — |
| 120.27.228.231 | 82 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 47.108.225.4 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-14 | — |
| 8.163.10.60 | 8084 | C2 | VShell | — | — | SG | AS37963 | 2026-09-14 | — |
| 49.233.70.168 | 6379 | C2 | VShell | — | — | CN | AS45090 | 2026-09-14 | — |
| 124.222.147.241 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-13 | — |
| 8.148.13.91 | 9000 | C2 | VShell | — | — | SG | AS37963 | 2026-09-13 | — |
| 192.187.118.180 | 8084 | C2 | VShell | — | — | US | AS33387 | 2026-09-13 | — |
| 43.155.246.58 | 8888 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-13 | — |
| 45.144.136.97 | 21 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 45.144.136.97 | 8099 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 45.144.136.97 | 8080 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 45.144.136.97 | 443 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 154.91.56.124 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-13 | — |
| 193.112.28.215 | 2443 | C2 | VShell | — | — | CN | AS45090 | 2026-09-13 | — |
| 178.128.196.79 | 8443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-09-13 | — |
| 104.248.156.16 | 80 | C2 | Havoc | — | — | US | AS14061 | 2026-09-13 | 2026-09-20 |
| 143.246.217.103 | 443 | C2 | AdaptixC2 | — | — | MD | AS200019 | 2026-09-13 | — |
| 191.101.130.73 | 8041 | C2 | Unknown RAT | — | — | AE | AS396073 | 2026-09-13 | — |
| 94.237.62.102 | 80 | C2 | AdaptixC2 | — | — | FI | AS202053 | 2026-09-13 | 2026-09-20 |
| 94.154.32.24 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-13 | 2026-09-20 |
| 84.247.187.47 | 6660 | C2 | AsyncRAT | — | — | DE | AS51167 | 2026-09-13 | 2026-09-20 |
| 66.179.29.5 | 9000 | C2 | PureRAT | — | — | GB | AS215674 | 2026-09-13 | 2026-09-20 |