| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 139.180.185.170 | 443 | C2 | Sliver | — | — | US | AS20473 | 2026-10-19 | 2026-10-23 |
| 107.175.39.140 | 80 | C2 | Mirai | — | — | US | AS36352 | 2026-10-19 | 2026-10-23 |
| 104.234.177.138 | 2030 | C2 | Evilginx | — | — | CA | AS134677 | 2026-10-19 | 2026-10-23 |
| 102.117.166.182 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-10-19 | 2026-10-23 |
| 47.95.197.27 | 9999 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 23.132.164.15 | 14641 | C2 | Remcos | — | — | US | AS401626 | 2026-10-19 | — |
| 47.95.197.27 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 202.95.1.40 | 9444 | C2 | VShell | — | — | SG | AS152194 | 2026-10-19 | — |
| 203.91.78.218 | 8084 | C2 | VShell | — | — | HK | AS400619 | 2026-10-19 | — |
| 177.3.92.247 | 8084 | C2 | VShell | — | — | HK | AS137535 | 2026-10-19 | — |
| 209.127.35.200 | 7689 | C2 | XWorm | — | — | CA | AS55286 | 2026-10-19 | — |
| 152.89.168.244 | 8443 | C2 | XWorm | — | — | CZ | AS212271 | 2026-10-19 | — |
| 43.142.129.189 | 8086 | C2 | VShell | — | — | CN | AS45090 | 2026-10-19 | — |
| 101.201.75.136 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 45.77.180.52 | 8443 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 18.179.34.241 | 3232 | C2 | Unknown | — | — | US | AS16509 | 2026-10-19 | — |
| 176.65.139.227 | 80 | Payload | Mirai | — | — | DE | AS219502 | 2026-10-19 | — |
| 2.27.4.70 | 8093 | C2 | Hermes | — | — | US | AS210457 | 2026-10-19 | — |
| 103.114.43.152 | 8093 | C2 | Hermes | — | — | SC | AS200823 | 2026-10-19 | — |
| 109.238.87.120 | 8093 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 109.238.87.128 | 8093 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 151.80.21.177 | 8093 | C2 | Hermes | — | — | FR | AS16276 | 2026-10-19 | — |
| 2.27.4.70 | 8080 | C2 | Hermes | — | — | US | AS210457 | 2026-10-19 | — |
| 103.114.43.152 | 8080 | C2 | Hermes | — | — | SC | AS200823 | 2026-10-19 | — |
| 109.238.87.120 | 8080 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 109.238.87.128 | 8080 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 151.80.21.177 | 8080 | C2 | Hermes | — | — | FR | AS16276 | 2026-10-19 | — |
| 194.102.104.223 | 8080 | C2 | Hermes | — | — | RO | AS48753 | 2026-10-19 | — |
| 2.27.4.70 | 8787 | C2 | Hermes | — | — | US | AS210457 | 2026-10-19 | — |
| 103.114.43.152 | 8787 | C2 | Hermes | — | — | SC | AS200823 | 2026-10-19 | — |
| 109.238.87.120 | 8787 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 109.238.87.128 | 8787 | C2 | Hermes | — | — | RU | AS55286 | 2026-10-19 | — |
| 151.80.21.177 | 8787 | C2 | Hermes | — | — | FR | AS16276 | 2026-10-19 | — |
| 194.102.104.223 | 8787 | C2 | Hermes | — | — | RO | AS48753 | 2026-10-19 | — |
| 176.65.139.143 | 3778 | C2 | Mirai | — | — | DE | AS219502 | 2026-10-19 | — |
| 91.92.43.242 | 80 | C2 | RomulusLoader | — | — | BG | AS207043 | 2026-10-19 | 2026-10-23 |
| 93.152.213.151 | 80 | C2 | RomulusLoader | — | — | BG | AS207043 | 2026-10-19 | 2026-10-23 |
| 23.94.252.153 | 80 | Payload | Unknown RAT | — | — | US | AS207043 | 2026-10-19 | — |
| 45.77.180.52 | 8080 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 45.77.180.52 | 80 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 45.77.180.52 | 443 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-10-19 | — |
| 23.132.164.140 | 2404 | C2 | Remcos | — | — | US | AS401626 | 2026-10-19 | — |
| 43.136.92.170 | 8081 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-19 | — |
| 195.177.94.15 | 2404 | C2 | Remcos | — | — | UA | AS214961 | 2026-10-19 | 2026-10-19 |
| 172.111.150.135 | 29811 | C2 | Remcos | — | — | US | AS212238 | 2026-10-19 | — |
| 160.30.139.165 | 2404 | C2 | Remcos | — | — | US | AS136557 | 2026-10-19 | — |
| 106.14.26.31 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 103.213.248.138 | 8083 | C2 | VShell | — | — | JP | AS138968 | 2026-10-19 | — |
| 101.201.75.136 | 8086 | C2 | VShell | — | — | CN | AS37963 | 2026-10-19 | — |
| 8.217.47.159 | 80 | C2 | ValleyRAT | — | — | SG | AS45102 | 2026-10-19 | — |