| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.94.1.88 | 31337 | C2 | Sliver | — | — | US | AS154177 | 2026-10-18 | — |
| 167.99.227.197 | 31337 | C2 | Sliver | — | — | US | AS14061 | 2026-10-18 | — |
| 217.60.194.116 | 80 | Payload | XMRIG | — | — | AE | AS213900 | 2026-10-18 | 2026-10-18 |
| 77.90.185.205 | 3333 | C2 | XMRIG | — | — | DE | AS213790 | 2026-10-18 | 2026-10-18 |
| 206.123.137.176 | 56090 | C2 | Remcos | — | — | US | AS9009 | 2026-10-18 | 2026-10-20 |
| 96.62.218.236 | 22 | C2 | Havoc | — | — | US | AS207043 | 2026-10-18 | — |
| 96.62.218.236 | 443 | C2 | Havoc | — | — | US | AS207043 | 2026-10-18 | 2026-10-23 |
| 96.62.218.236 | 5901 | C2 | Havoc | — | — | US | AS207043 | 2026-10-18 | — |
| 95.133.230.193 | 8082 | C2 | Evilginx | — | — | DE | AS219399 | 2026-10-18 | 2026-10-23 |
| 87.253.104.147 | 7443 | C2 | Unknown | — | — | IT | AS13113 | 2026-10-18 | 2026-10-23 |
| 50.114.184.21 | 442 | C2 | PureRAT | — | — | US | AS140869 | 2026-10-18 | 2026-10-23 |
| 47.121.216.109 | 21375 | C2 | Chaos | — | — | CN | AS37963 | 2026-10-18 | 2026-10-23 |
| 45.139.104.48 | 49001 | C2 | PureRAT | — | — | US | AS399979 | 2026-10-18 | 2026-10-23 |
| 45.137.194.219 | 5000 | C2 | Evilginx | — | — | DE | AS40021 | 2026-10-18 | 2026-10-23 |
| 34.58.3.174 | 6932 | C2 | AsyncRAT | — | — | US | AS396982 | 2026-10-18 | 2026-10-23 |
| 31.76.96.157 | 50357 | C2 | AdaptixC2 | — | — | US | AS206134 | 2026-10-18 | 2026-10-23 |
| 202.146.222.229 | 4443 | C2 | PureRAT | — | — | HK | AS152194 | 2026-10-18 | 2026-10-23 |
| 202.146.222.48 | 4443 | C2 | PureRAT | — | — | HK | AS152194 | 2026-10-18 | 2026-10-23 |
| 192.253.229.14 | 4443 | C2 | PureRAT | — | — | US | AS152194 | 2026-10-18 | 2026-10-23 |
| 181.235.13.54 | 5010 | C2 | AsyncRAT | — | — | CO | AS3816 | 2026-10-18 | 2026-10-23 |
| 181.235.13.54 | 5012 | C2 | AsyncRAT | — | — | CO | AS3816 | 2026-10-18 | 2026-10-23 |
| 159.223.126.127 | 4321 | C2 | AdaptixC2 | — | — | US | AS14061 | 2026-10-18 | 2026-10-23 |
| 104.254.90.122 | 29245 | C2 | AsyncRAT | — | — | CA | AS32489 | 2026-10-18 | 2026-10-23 |
| 104.239.66.89 | 8848 | C2 | DCRat | — | — | GB | AS214961 | 2026-10-18 | 2026-10-23 |
| 102.117.169.36 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-10-18 | 2026-10-23 |
| 47.109.103.59 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-10-18 | 2026-10-19 |
| 47.109.103.59 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-10-18 | — |
| 47.111.91.133 | 8085 | C2 | VShell | — | — | CN | AS37963 | 2026-10-18 | — |
| 111.170.148.132 | 10010 | C2 | Unknown | — | — | CN | AS151185 | 2026-10-18 | — |
| 106.53.122.222 | 18084 | C2 | VShell | — | — | CN | AS45090 | 2026-10-18 | — |
| 129.204.57.13 | 8443 | C2 | VShell | — | — | CN | AS45090 | 2026-10-18 | — |
| 111.170.148.132 | 10011 | C2 | Unknown | — | — | CN | AS151185 | 2026-10-18 | — |
| 111.170.148.132 | 10012 | C2 | Unknown | — | — | CN | AS151185 | 2026-10-18 | — |
| 8.212.181.6 | 80 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-10-18 | 2026-10-21 |
| 8.217.91.135 | 443 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-10-18 | — |
| 104.168.4.206 | 576 | C2 | Bashlite | — | — | US | AS36352 | 2026-10-18 | — |
| 193.233.20.122 | 8443 | C2 | Mirai | — | — | RU | AS212165 | 2026-10-18 | — |
| 145.63.134.94 | 408 | C2 | Unknown | — | — | NL | AS210895 | 2026-10-18 | — |
| 85.215.45.36 | 80 | Payload | Unknown | — | — | DE | AS8560 | 2026-10-18 | — |
| 195.58.146.210 | 80 | C2 | Unknown | — | — | DK | AS9009 | 2026-10-18 | — |
| 195.58.146.210 | 443 | C2 | Unknown | — | — | DK | AS9009 | 2026-10-18 | — |
| 121.40.113.200 | 80 | C2 | VShell | — | — | CN | AS37963 | 2026-10-18 | — |
| 45.142.143.152 | 8080 | C2 | AdaptixC2 | — | — | RO | AS39287 | 2026-10-18 | — |
| 157.173.126.174 | 3859 | C2 | Remus | — | — | DE | AS51167 | 2026-10-18 | 2026-10-18 |
| 45.142.142.252 | 8080 | C2 | AdaptixC2 | — | — | RO | AS39287 | 2026-10-18 | — |
| 159.75.118.45 | 5003 | C2 | Unknown | — | — | CN | AS45090 | 2026-10-18 | — |
| 39.105.111.104 | 1234 | C2 | VShell | — | — | CN | AS37963 | 2026-10-18 | — |
| 94.154.32.27 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-10-17 | 2026-10-23 |
| 94.154.32.27 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-10-17 | 2026-10-23 |
| 91.92.243.15 | 2006 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-10-17 | 2026-10-23 |