| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 185.184.70.41 | 80 | C2 | Cobalt Strike | — | — | GB | AS49683 | 2026-10-18 | 2026-10-19 |
| 185.184.70.41 | 22 | C2 | Cobalt Strike | — | — | GB | AS49683 | 2026-10-18 | — |
| 90.148.39.109 | 9480 | C2 | Xtreme RAT | — | — | SA | AS25019 | 2026-10-18 | — |
| 47.252.13.1 | 10001 | C2 | Xtreme RAT | — | — | US | AS45102 | 2026-10-18 | — |
| 188.25.15.70 | 54984 | C2 | Nanocore RAT | — | — | RO | AS8708 | 2026-10-18 | — |
| 140.99.98.91 | 1177 | C2 | NjRAT | — | — | US | AS138156 | 2026-10-18 | — |
| 80.200.202.102 | 5552 | C2 | NjRAT | — | — | BE | AS5432 | 2026-10-18 | — |
| 188.137.225.124 | 9000 | C2 | SectopRAT | — | — | NL | AS211381 | 2026-10-18 | — |
| 45.227.254.114 | 9000 | C2 | SectopRAT | — | — | PA | AS267784 | 2026-10-18 | — |
| 212.118.39.90 | 9000 | C2 | SectopRAT | — | — | AE | AS216071 | 2026-10-18 | — |
| 145.63.140.171 | 9000 | C2 | SectopRAT | — | — | NL | AS211381 | 2026-10-18 | — |
| 5.8.248.204 | 9000 | C2 | SectopRAT | — | — | NL | AS211381 | 2026-10-18 | — |
| 77.238.252.235 | 9000 | C2 | SectopRAT | — | — | AE | AS216071 | 2026-10-18 | — |
| 80.78.28.56 | 31337 | C2 | Sliver | — | — | RO | AS39287 | 2026-10-18 | 2026-10-19 |
| 140.143.193.143 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-18 | — |
| 118.26.111.141 | 80 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-10-18 | — |
| 118.26.111.141 | 8080 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-10-18 | — |
| 118.26.111.141 | 443 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-10-18 | — |
| 118.26.111.141 | 22 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-10-18 | — |
| 216.158.94.75 | 56001 | C2 | PureRAT | — | — | US | AS18450 | 2026-10-18 | — |
| 216.158.94.75 | 56002 | C2 | PureRAT | — | — | US | AS18450 | 2026-10-18 | — |
| 216.158.94.75 | 56003 | C2 | PureRAT | — | — | US | AS18450 | 2026-10-18 | — |
| 193.233.75.115 | 41012 | C2 | Unknown | — | — | RU | AS209207 | 2026-10-18 | — |
| 102.220.161.230 | 419 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 46.151.182.129 | 419 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 194.11.246.110 | 418 | C2 | Tofsee | — | — | IN | AS215117 | 2026-10-18 | — |
| 102.220.161.230 | 418 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 46.151.182.129 | 418 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 194.11.246.110 | 417 | C2 | Tofsee | — | — | IN | AS215117 | 2026-10-18 | 2026-10-21 |
| 102.220.161.230 | 417 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | 2026-10-21 |
| 46.151.182.129 | 417 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | 2026-10-21 |
| 102.220.161.230 | 428 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | 2026-10-21 |
| 46.151.182.129 | 428 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | 2026-10-21 |
| 102.220.161.230 | 422 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 46.151.182.129 | 422 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 102.220.161.230 | 416 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 46.151.182.129 | 416 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 46.151.182.129 | 431 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 194.11.246.110 | 431 | C2 | Tofsee | — | — | IN | AS215117 | 2026-10-18 | — |
| 102.220.161.230 | 431 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 46.151.182.129 | 427 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-18 | — |
| 194.11.246.110 | 427 | C2 | Tofsee | — | — | IN | AS215117 | 2026-10-18 | — |
| 102.220.161.230 | 427 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-18 | — |
| 156.251.16.147 | 7788 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-10-18 | — |
| 47.242.154.94 | 18300 | C2 | ValleyRAT | — | — | US | AS45102 | 2026-10-18 | — |
| 206.123.137.176 | 57484 | C2 | Remcos | — | — | US | AS9009 | 2026-10-18 | 2026-10-20 |
| 120.79.192.53 | 3232 | C2 | Unknown | — | — | CN | AS37963 | 2026-10-18 | — |
| 47.109.103.59 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-10-18 | — |
| 96.62.218.236 | 6002 | C2 | Havoc | — | — | US | AS207043 | 2026-10-18 | — |
| 47.109.103.59 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-10-18 | — |