| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 34.76.205.124 | 443 | C2 | Nanocore RAT | — | — | US | AS396982 | 2026-09-12 | — |
| 154.91.62.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.62.101 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.61.122 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 49.51.230.17 | 53001 | C2 | Cobalt Strike | — | — | CN | AS132203 | 2026-09-12 | 2026-09-18 |
| 38.76.183.197 | 8806 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-12 | 2026-09-18 |
| 165.154.68.30 | 4433 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-09-12 | 2026-09-18 |
| 159.65.59.117 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-16 |
| 103.182.132.154 | 22 | C2 | XMRIG | — | — | IN | AS149526 | 2026-09-12 | — |
| 114.111.53.214 | 22 | C2 | XMRIG | — | — | KR | AS54994 | 2026-09-12 | — |
| 45.239.9.8 | 22 | C2 | XMRIG | — | — | BR | AS264562 | 2026-09-12 | — |
| 45.78.201.248 | 22 | C2 | XMRIG | — | — | SG | AS150436 | 2026-09-12 | — |
| 223.19.66.178 | 22 | C2 | Payload | — | — | HK | AS9304 | 2026-09-12 | — |
| 120.26.164.252 | 9918 | Payload | Payload | — | — | CN | AS37963 | 2026-09-12 | — |
| 47.239.197.191 | 7650 | Payload | Payload | — | — | US | AS45102 | 2026-09-12 | — |
| 154.91.61.108 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.99 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.98 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 138.68.130.69 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-17 |
| 165.22.113.73 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-14 |
| 154.91.60.125 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.108 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.62.111 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.121 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.111 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 192.3.198.23 | 5130 | C2 | Remcos | — | — | US | AS36352 | 2026-09-12 | 2026-09-14 |
| 139.59.168.101 | 8080 | C2 | Aisuru | — | — | SG | AS14061 | 2026-09-12 | 2026-09-13 |
| 154.91.60.104 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.102 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.99 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.126 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.118 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 209.38.225.90 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-15 |
| 154.91.60.103 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 94.26.248.76 | 50050 | C2 | AdaptixC2 | — | — | RU | AS49505 | 2026-09-12 | 2026-09-18 |
| 84.247.141.236 | 8443 | C2 | Evilginx | — | — | DE | AS51167 | 2026-09-12 | 2026-09-18 |
| 68.178.205.17 | 40056 | C2 | Sliver | — | — | US | AS398101 | 2026-09-12 | 2026-09-18 |
| 68.178.202.150 | 40056 | C2 | Sliver | — | — | US | AS398101 | 2026-09-12 | 2026-09-18 |
| 66.94.113.10 | 443 | C2 | PureRAT | — | — | US | AS40021 | 2026-09-12 | 2026-09-18 |
| 65.108.13.44 | 7443 | C2 | Unknown | — | — | DE | AS24940 | 2026-09-12 | 2026-09-18 |
| 46.246.4.10 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-09-12 | 2026-09-18 |
| 37.244.232.113 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-09-12 | 2026-09-18 |
| 208.167.253.21 | 7443 | C2 | Unknown | — | — | US | AS20473 | 2026-09-12 | 2026-09-18 |
| 194.110.172.193 | 7777 | C2 | DCRat | — | — | DE | AS60790 | 2026-09-12 | 2026-09-18 |
| 187.145.61.38 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-09-12 | 2026-09-18 |
| 166.1.249.50 | 4321 | C2 | AdaptixC2 | — | — | US | AS149440 | 2026-09-12 | 2026-09-18 |
| 13.251.42.119 | 8088 | C2 | Unknown | — | — | US | AS16509 | 2026-09-12 | 2026-09-18 |
| 128.90.105.161 | 7777 | C2 | DCRat | — | — | US | AS40861 | 2026-09-12 | 2026-09-18 |
| 107.172.232.71 | 443 | C2 | PureRAT | — | — | US | AS36352 | 2026-09-12 | 2026-09-18 |
| 102.220.160.198 | 2026 | C2 | AsyncRAT | — | — | NG | AS197769 | 2026-09-12 | 2026-09-18 |