| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 154.91.60.119 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-09 | — |
| 152.32.133.192 | 3389 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 83.229.123.249 | 22 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-09 | — |
| 83.229.123.249 | 8081 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-09 | — |
| 83.229.123.249 | 8080 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-09 | — |
| 83.229.123.249 | 443 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-09 | — |
| 83.229.123.249 | 80 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-09 | — |
| 154.91.60.115 | 8094 | C2 | VShell | — | — | SC | AS400619 | 2026-09-09 | — |
| 154.91.59.117 | 8094 | C2 | VShell | — | — | SC | AS400619 | 2026-09-09 | — |
| 107.175.94.184 | 61238 | C2 | VShell | — | — | US | AS36352 | 2026-09-09 | — |
| 43.136.93.81 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-09 | — |
| 96.9.226.22 | 6606 | C2 | AsyncRAT | — | — | US | AS32489 | 2026-09-09 | 2026-09-16 |
| 84.247.187.47 | 9918 | C2 | AsyncRAT | — | — | DE | AS51167 | 2026-09-09 | 2026-09-16 |
| 84.247.187.47 | 4445 | C2 | AsyncRAT | — | — | DE | AS51167 | 2026-09-09 | 2026-09-16 |
| 82.22.7.20 | 50604 | C2 | PureRAT | — | — | GB | AS198825 | 2026-09-09 | 2026-09-16 |
| 79.76.35.195 | 443 | C2 | DanaBot | — | — | SE | AS31898 | 2026-09-09 | 2026-09-16 |
| 65.87.7.11 | 7443 | C2 | Unknown | — | — | US | AS215659 | 2026-09-09 | 2026-09-16 |
| 38.247.165.127 | 9990 | C2 | AsyncRAT | — | — | US | AS393398 | 2026-09-09 | 2026-09-16 |
| 31.76.103.200 | 56003 | C2 | PureRAT | — | — | US | AS201988 | 2026-09-09 | 2026-09-16 |
| 217.60.195.139 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-09 | 2026-09-16 |
| 212.43.153.205 | 8808 | C2 | AsyncRAT | — | — | NL | AS211381 | 2026-09-09 | 2026-09-16 |
| 202.162.99.199 | 56002 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-09 | 2026-09-16 |
| 192.241.151.6 | 8443 | C2 | Evilginx | — | — | US | AS14061 | 2026-09-09 | 2026-09-16 |
| 187.145.125.245 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-09-09 | 2026-09-16 |
| 186.240.202.89 | 56001 | C2 | PureRAT | — | — | SG | AS4907 | 2026-09-09 | 2026-09-16 |
| 186.240.202.85 | 56001 | C2 | PureRAT | — | — | SG | AS4907 | 2026-09-09 | 2026-09-16 |
| 172.234.71.84 | 9443 | C2 | Unknown | — | — | US | AS63949 | 2026-09-09 | 2026-09-16 |
| 150.40.98.51 | 7443 | C2 | Unknown | — | — | HR | AS30893 | 2026-09-09 | 2026-09-16 |
| 146.70.79.45 | 31337 | C2 | Sliver | — | — | RO | AS9009 | 2026-09-09 | 2026-09-16 |
| 144.172.112.126 | 443 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-09 | 2026-09-16 |
| 138.16.178.77 | 6606 | C2 | AsyncRAT | — | — | RU | AS48282 | 2026-09-09 | 2026-09-16 |
| 137.220.194.12 | 56002 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-09 | 2026-09-16 |
| 137.220.194.12 | 56001 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-09 | 2026-09-16 |
| 118.107.16.32 | 56002 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-09 | 2026-09-16 |
| 107.172.134.37 | 6677 | C2 | PureRAT | — | — | US | AS36352 | 2026-09-09 | 2026-09-16 |
| 103.108.66.160 | 6606 | C2 | AsyncRAT | — | — | HK | AS401696 | 2026-09-09 | 2026-09-16 |
| 102.117.161.77 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-09 | 2026-09-16 |
| 152.32.133.192 | 7500 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 152.32.133.192 | 5985 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 152.32.133.192 | 8080 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 152.32.133.192 | 60000 | C2 | Unknown | — | — | HK | AS135377 | 2026-09-09 | — |
| 8.147.114.203 | 443 | C2 | Havoc | — | — | SG | AS37963 | 2026-09-09 | — |
| 167.172.71.91 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-09 | 2026-09-12 |
| 23.254.226.46 | 13500 | C2 | BingoMod | — | — | US | AS54290 | 2026-09-09 | — |
| 108.165.185.197 | 2404 | C2 | Remcos | — | — | US | AS14315 | 2026-09-09 | 2026-09-14 |
| 102.220.161.52 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-09 | — |
| 130.12.182.201 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-09-09 | 2026-09-14 |
| 102.220.161.73 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-09-09 | — |
| 95.211.120.98 | 7004 | C2 | XWorm | — | — | NL | AS60781 | 2026-09-09 | — |
| 104.168.7.212 | 7004 | C2 | XWorm | — | — | US | AS36352 | 2026-09-09 | — |