| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 191.101.130.245 | 5199 | C2 | AsyncRAT | — | — | AE | AS396073 | 2026-07-14 | 2026-07-21 |
| 185.223.57.86 | 8808 | C2 | AsyncRAT | — | — | BG | AS59711 | 2026-07-14 | 2026-07-21 |
| 185.115.164.59 | 53353 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-14 | 2026-07-21 |
| 158.94.211.63 | 32333 | C2 | AdaptixC2 | — | — | TR | AS202412 | 2026-07-14 | 2026-07-21 |
| 155.103.71.115 | 15608 | C2 | Remcos | — | — | US | AS44382 | 2026-07-14 | 2026-07-21 |
| 151.145.34.33 | 8080 | C2 | Chaos | — | — | US | AS31898 | 2026-07-14 | 2026-07-21 |
| 147.182.143.172 | 8080 | C2 | Evilginx | — | — | US | AS14061 | 2026-07-14 | 2026-07-21 |
| 147.124.214.170 | 4056 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-14 | 2026-07-21 |
| 103.83.86.48 | 1616 | C2 | Remcos | — | — | TR | AS44382 | 2026-07-14 | 2026-07-21 |
| 179.43.190.13 | 80 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-14 | — |
| 179.43.190.13 | 443 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-14 | — |
| 128.241.231.135 | 18082 | C2 | VShell | — | — | US | AS213802 | 2026-07-14 | — |
| 162.249.125.141 | 13 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 162.249.125.141 | 80 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 27.133.154.218 | 443 | C2 | QakBot | — | — | JP | AS9370 · SAKURA-B SAKURA Internet Inc. | 2026-03-04 | 2026-03-05 |
| 178.62.3.223 | 443 | C2 | QakBot | — | box.nautadb.com | GB | AS14061 · DIGITALOCEAN-ASN - DigitalOcean, LLC | 2026-02-17 | 2026-02-18 |
| 34.204.119.63 | 443 | C2 | QakBot | — | ec2-34-204-119-63.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2026-01-13 | 2026-03-01 |
| 50.16.16.211 | 443 | C2 | QakBot | — | ec2-50-16-16-211.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2025-12-30 | 2026-03-12 |
| 162.243.103.246 | 8080 | C2 | Emotet | — | — | US | AS14061 · DIGITALOCEAN-ASN | 2022-06-04 | 2026-03-07 |