| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 151.80.21.177 | 8080 | C2 | Hermes | — | — | FR | AS16276 | 2026-10-19 | — |
| 194.102.104.223 | 8080 | C2 | Hermes | — | — | RO | AS48753 | 2026-10-19 | — |
| 2.27.4.70 | 8787 | C2 | Hermes | — | — | US | AS210457 | 2026-10-19 | — |
| 103.114.43.152 | 8787 | C2 | Hermes | — | — | SC | AS200823 | 2026-10-19 | — |
| 109.238.87.120 | 8787 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 109.238.87.128 | 8787 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 151.80.21.177 | 8787 | C2 | Hermes | — | — | FR | AS16276 | 2026-10-19 | — |
| 194.102.104.223 | 8787 | C2 | Hermes | — | — | RO | AS48753 | 2026-10-19 | — |
| 176.65.139.143 | 3778 | C2 | Mirai | — | — | DE | AS219502 | 2026-10-19 | — |
| 91.92.43.242 | 80 | C2 | RomulusLoader | — | — | BG | AS207043 | 2026-10-19 | 2026-10-22 |
| 93.152.213.151 | 80 | C2 | RomulusLoader | — | — | BG | AS207043 | 2026-10-19 | 2026-10-22 |
| 23.94.252.153 | 80 | C2 | RomulusLoader | — | — | US | AS207043 | 2026-10-19 | 2026-10-22 |
| 45.77.180.52 | 8080 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 45.77.180.52 | 80 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 45.77.180.52 | 443 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 23.132.164.140 | 2404 | C2 | Remcos | — | — | US | AS401626 | 2026-10-19 | — |
| 43.136.92.170 | 8081 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-19 | — |
| 195.177.94.15 | 2404 | C2 | Remcos | — | — | UA | AS214961 | 2026-10-19 | 2026-10-19 |
| 172.111.150.135 | 29811 | C2 | Remcos | — | — | US | AS212238 | 2026-10-19 | — |
| 160.30.139.165 | 2404 | C2 | Remcos | — | — | US | AS136557 | 2026-10-19 | — |
| 106.14.26.31 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 103.213.248.138 | 8083 | C2 | VShell | — | — | JP | AS138968 | 2026-10-19 | — |
| 101.201.75.136 | 8086 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 8.217.47.159 | 80 | C2 | ValleyRAT | — | — | SG | AS45102 | 2026-10-19 | — |
| 118.107.28.219 | 6666 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-10-19 | — |
| 137.220.242.14 | 6666 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-10-19 | — |
| 8.217.47.159 | 443 | C2 | ValleyRAT | — | — | SG | AS45102 | 2026-10-19 | — |
| 193.161.193.99 | 53112 | C2 | NjRAT | — | — | RU | AS198134 | 2026-10-19 | — |
| 77.90.4.104 | 9692 | C2 | Remus | — | — | DE | AS214243 | 2026-10-18 | 2026-10-20 |
| 154.12.17.103 | 80 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-10-18 | — |
| 46.109.233.163 | 8808 | C2 | AsyncRAT | — | — | LV | AS12578 | 2026-10-18 | — |
| 159.89.170.166 | 7589 | C2 | Remus | — | — | US | AS14061 | 2026-10-18 | 2026-10-20 |
| 163.7.0.131 | 8085 | C2 | VShell | — | — | SG | AS150436 | 2026-10-18 | — |
| 96.62.218.236 | 5902 | C2 | Havoc | — | — | US | AS207043 | 2026-10-18 | — |
| 94.154.32.8 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-10-18 | 2026-10-22 |
| 91.92.243.15 | 1113 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-10-18 | 2026-10-22 |
| 91.92.243.15 | 2022 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-10-18 | 2026-10-22 |
| 91.92.243.15 | 77 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-10-18 | 2026-10-22 |
| 89.31.121.156 | 4321 | C2 | AdaptixC2 | — | — | AT | AS9009 | 2026-10-18 | 2026-10-22 |
| 82.47.180.159 | 56002 | C2 | PureRAT | — | — | GB | AS16276 | 2026-10-18 | 2026-10-22 |
| 82.47.180.159 | 56003 | C2 | PureRAT | — | — | GB | AS16276 | 2026-10-18 | 2026-10-22 |
| 46.246.84.14 | 2703 | C2 | AsyncRAT | — | — | SE | AS42708 | 2026-10-18 | 2026-10-22 |
| 45.92.1.84 | 443 | C2 | PureRAT | — | — | NL | AS210558 | 2026-10-18 | 2026-10-22 |
| 45.153.34.173 | 56002 | C2 | PureRAT | — | — | DE | AS197170 | 2026-10-18 | 2026-10-22 |
| 39.105.125.235 | 7443 | C2 | Unknown | — | — | CN | AS37963 | 2026-10-18 | 2026-10-22 |
| 37.104.21.124 | 443 | C2 | Havoc | — | — | SA | AS25019 | 2026-10-18 | 2026-10-22 |
| 23.227.203.71 | 42555 | C2 | AdaptixC2 | — | — | US | AS29802 | 2026-10-18 | 2026-10-22 |
| 207.56.30.177 | 56003 | C2 | PureRAT | — | — | US | AS54801 | 2026-10-18 | 2026-10-22 |
| 207.56.30.181 | 56003 | C2 | PureRAT | — | — | US | AS54801 | 2026-10-18 | 2026-10-22 |
| 185.147.159.251 | 443 | C2 | Unknown | — | — | US | AS22295 | 2026-10-18 | 2026-10-22 |