| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 192.163.162.72 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-09-06 | — |
| 192.163.162.72 | 56002 | C2 | PureRAT | — | — | US | AS138995 | 2026-09-06 | — |
| 156.240.108.46 | 56003 | C2 | PureRAT | — | — | SC | AS140227 | 2026-09-06 | 2026-09-12 |
| 177.5.78.71 | 56002 | C2 | PureRAT | — | — | HK | AS137535 | 2026-09-06 | — |
| 177.5.78.71 | 56001 | C2 | PureRAT | — | — | HK | AS137535 | 2026-09-06 | — |
| 156.240.108.46 | 56001 | C2 | PureRAT | — | — | SC | AS140227 | 2026-09-06 | 2026-09-12 |
| 177.5.78.71 | 56003 | C2 | PureRAT | — | — | HK | AS137535 | 2026-09-06 | — |
| 179.236.107.22 | 56001 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | — |
| 156.240.108.46 | 56002 | C2 | PureRAT | — | — | SC | AS140227 | 2026-09-06 | — |
| 179.236.107.40 | 56001 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | — |
| 179.236.107.22 | 56002 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | — |
| 179.236.107.22 | 56003 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | — |
| 144.172.65.241 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 179.236.107.40 | 56002 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | — |
| 179.236.107.40 | 56003 | C2 | PureRAT | — | — | HK | AS140227 | 2026-09-06 | 2026-09-12 |
| 104.194.135.149 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 104.194.135.115 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 144.172.65.156 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 153.75.94.222 | 56001 | C2 | PureRAT | — | — | AE | AS14956 | 2026-09-06 | — |
| 144.172.65.6 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 104.194.135.211 | 56001 | C2 | PureRAT | — | — | US | AS14956 | 2026-09-06 | — |
| 193.239.86.192 | 7000 | C2 | Cobalt Strike | — | — | RO | AS9009 | 2026-09-06 | — |
| 193.239.86.192 | 7443 | C2 | Cobalt Strike | — | — | RO | AS9009 | 2026-09-06 | — |
| 193.239.86.192 | 8080 | C2 | Cobalt Strike | — | — | RO | AS9009 | 2026-09-06 | — |
| 193.239.86.192 | 80 | C2 | Cobalt Strike | — | — | RO | AS9009 | 2026-09-06 | — |
| 193.239.86.192 | 443 | C2 | Cobalt Strike | — | — | RO | AS9009 | 2026-09-06 | — |
| 144.172.115.17 | 5173 | C2 | Unknown Stealer | — | — | US | AS14956 | 2026-09-06 | — |
| 176.98.182.218 | 5555 | C2 | Aisuru | — | — | SG | AS198855 | 2026-09-06 | 2026-09-10 |
| 206.189.127.191 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-06 | — |
| 51.195.113.99 | 3267 | C2 | Remus | — | — | FR | AS16276 | 2026-09-06 | 2026-09-08 |
| 152.136.253.101 | 53 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-06 | — |
| 31.77.161.250 | 8080 | C2 | AdaptixC2 | — | — | US | AS213520 | 2026-09-06 | — |
| 31.77.161.250 | 80 | C2 | AdaptixC2 | — | — | US | AS213520 | 2026-09-06 | — |
| 47.105.100.60 | 8086 | C2 | VShell | — | — | CN | AS37963 | 2026-09-06 | — |
| 38.76.202.152 | 9999 | C2 | VShell | — | — | US | AS401701 | 2026-09-06 | — |
| 31.77.161.250 | 443 | C2 | AdaptixC2 | — | — | US | AS213520 | 2026-09-06 | — |
| 38.46.15.204 | 4141 | C2 | VShell | — | — | US | AS22427 | 2026-09-06 | — |
| 102.117.172.204 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-06 | — |
| 122.51.155.216 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-06 | — |
| 150.242.246.106 | 8001 | C2 | VShell | — | — | CN | AS134765 | 2026-09-06 | — |
| 110.42.239.240 | 21481 | C2 | VShell | — | — | CN | AS45090 | 2026-09-06 | — |
| 106.54.240.229 | 8484 | C2 | VShell | — | — | CN | AS45090 | 2026-09-06 | — |
| 152.136.56.105 | 3232 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-06 | — |
| 103.212.186.85 | 888 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-06 | — |
| 103.212.186.85 | 443 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-06 | — |
| 103.212.186.85 | 22 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-06 | — |
| 103.212.186.85 | 8080 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-06 | — |
| 103.212.186.85 | 80 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-06 | — |
| 141.94.121.162 | 6672 | C2 | DCRat | — | — | FR | AS16276 | 2026-09-06 | — |
| 223.109.142.7 | 22 | C2 | Cobalt Strike | — | — | CN | AS56046 | 2026-09-06 | — |