| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 5.180.20.26 | 8080 | C2 | AdaptixC2 | — | — | CY | AS200590 | 2026-09-05 | — |
| 5.180.20.26 | 80 | C2 | AdaptixC2 | — | — | CY | AS200590 | 2026-09-05 | — |
| 154.91.56.124 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.104 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 164.90.172.4 | 12345 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-05 | — |
| 5.180.20.26 | 443 | C2 | AdaptixC2 | — | — | CY | AS200590 | 2026-09-05 | — |
| 154.91.56.126 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 115.190.205.255 | 6688 | C2 | ValleyRAT | — | — | CN | AS137718 | 2026-09-05 | — |
| 115.190.205.255 | 66 | C2 | ValleyRAT | — | — | CN | AS137718 | 2026-09-05 | — |
| 115.190.205.255 | 8888 | C2 | ValleyRAT | — | — | CN | AS137718 | 2026-09-05 | — |
| 163.245.215.235 | 8848 | C2 | AsyncRAT | — | — | US | AS19318 | 2026-09-05 | — |
| 163.245.215.235 | 7707 | C2 | AsyncRAT | — | — | US | AS19318 | 2026-09-05 | — |
| 163.245.215.235 | 6606 | C2 | AsyncRAT | — | — | US | AS19318 | 2026-09-05 | — |
| 163.245.215.235 | 8808 | C2 | AsyncRAT | — | — | US | AS19318 | 2026-09-05 | — |
| 154.91.56.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.123 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.120 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.108 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 178.128.173.150 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-05 | — |
| 209.200.246.194 | 45126 | C2 | Cobalt Strike | — | — | US | AS215311 | 2026-09-05 | 2026-09-11 |
| 154.197.141.252 | 12443 | C2 | Cobalt Strike | — | — | SC | AS153656 | 2026-09-05 | 2026-09-11 |
| 154.197.141.246 | 12443 | C2 | Cobalt Strike | — | — | SC | AS153656 | 2026-09-05 | 2026-09-11 |
| 111.230.185.183 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-05 | 2026-09-11 |
| 103.212.186.85 | 8888 | C2 | Cobalt Strike | — | — | HK | AS401701 | 2026-09-05 | 2026-09-11 |
| 154.91.56.105 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.107 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.101 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.102 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.103 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 20.187.77.65 | 443 | C2 | Unknown RAT | — | — | US | AS8075 | 2026-09-05 | — |
| 154.91.56.119 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.118 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.56.117 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.59.111 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 154.91.59.107 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-05 | — |
| 38.76.205.40 | 31337 | C2 | Sliver | — | — | US | AS401701 | 2026-09-05 | — |
| 45.133.174.134 | 56001 | C2 | PureRAT | — | — | AE | AS210846 | 2026-09-05 | — |
| 37.120.222.88 | 56003 | C2 | PureRAT | — | — | RO | AS9009 | 2026-09-05 | 2026-09-11 |
| 181.215.242.24 | 56001 | C2 | PureRAT | — | — | AE | AS397423 | 2026-09-05 | — |
| 89.126.249.156 | 31337 | C2 | Sliver | — | — | IS | AS44925 | 2026-09-05 | — |
| 217.154.188.255 | 56003 | C2 | PureRAT | — | — | DE | AS8560 | 2026-09-05 | — |
| 130.94.41.151 | 31337 | C2 | Sliver | — | — | US | AS154177 | 2026-09-05 | — |
| 1.14.73.118 | 34091 | C2 | Sliver | — | — | CN | AS45090 | 2026-09-05 | — |
| 207.154.239.58 | 9000 | C2 | SectopRAT | — | — | US | AS14061 | 2026-09-05 | — |
| 136.64.24.207 | 31337 | C2 | Sliver | — | — | US | AS396982 | 2026-09-05 | — |
| 41.234.4.41 | 1339 | C2 | Quasar RAT | — | — | EG | AS8452 | 2026-09-05 | 2026-09-09 |
| 151.59.16.120 | 8080 | C2 | SectopRAT | — | — | IT | AS1267 | 2026-09-05 | — |
| 192.3.136.229 | 4782 | C2 | Quasar RAT | — | — | US | AS36352 | 2026-09-05 | 2026-09-11 |
| 62.171.173.61 | 4782 | C2 | Quasar RAT | — | — | DE | AS51167 | 2026-09-05 | — |
| 5.61.209.139 | 56001 | C2 | PureRAT | — | — | SC | AS206264 | 2026-09-05 | — |