| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 13.140.42.128 | 7004 | C2 | XWorm | — | — | DE | AS40021 | 2026-09-10 | — |
| 154.91.58.126 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.105 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.100 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.102 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.59.108 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.111 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.109 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.104 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.108 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.102 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.105 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.106 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.126 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.125 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.124 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.123 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 38.76.190.209 | 8090 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-10 | 2026-09-16 |
| 209.200.246.80 | 4444 | C2 | Cobalt Strike | — | — | US | AS215311 | 2026-09-10 | 2026-09-16 |
| 209.200.246.80 | 26513 | C2 | Cobalt Strike | — | — | US | AS215311 | 2026-09-10 | 2026-09-16 |
| 216.9.225.150 | 2404 | C2 | Remcos | — | — | US | AS44382 | 2026-09-10 | 2026-09-16 |
| 45.153.219.166 | 1010 | C2 | Unknown | — | — | SC | AS200823 | 2026-09-10 | — |
| 154.91.57.121 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.99 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.98 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.58.102 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.120 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.58.100 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.58.101 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.98 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.99 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 64.89.160.225 | 7001 | C2 | XWorm | — | — | US | AS36680 | 2026-09-10 | — |
| 45.154.98.168 | 9019 | C2 | XWorm | — | — | BE | AS210558 | 2026-09-10 | — |
| 158.94.209.216 | 2404 | C2 | Remcos | — | — | TR | AS202412 | 2026-09-10 | — |
| 103.83.86.22 | 7500 | C2 | XWorm | — | — | TR | AS44382 | 2026-09-10 | — |
| 194.116.236.9 | 7000 | C2 | XWorm | — | — | TR | AS44382 | 2026-09-10 | — |
| 193.160.223.238 | 31896 | C2 | Remcos | — | — | DE | AS47447 | 2026-09-10 | 2026-09-16 |
| 64.225.107.48 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-10 | — |
| 161.35.166.196 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-10 | 2026-09-16 |
| 154.91.56.115 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.114 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.57.119 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.56.109 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 154.91.63.125 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-10 | — |
| 203.202.232.127 | 1515 | C2 | XWorm | — | — | TR | AS44382 | 2026-09-10 | — |
| 103.83.86.96 | 4001 | C2 | XWorm | — | — | TR | AS44382 | 2026-09-10 | — |
| 45.67.139.138 | 8675 | C2 | Remcos | — | — | DE | AS213535 | 2026-09-10 | — |
| 31.59.137.16 | 2026 | C2 | Remcos | — | — | AE | AS215286 | 2026-09-10 | — |
| 91.239.6.97 | 4449 | C2 | XWorm | — | — | AL | AS213683 | 2026-09-10 | — |