| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 43.254.166.35 | 39001 | C2 | VShell | — | — | HK | AS42960 | 2026-09-01 | — |
| 192.144.168.105 | 9999 | C2 | VShell | — | — | CN | AS45090 | 2026-09-01 | — |
| 146.56.239.16 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-01 | — |
| 46.225.5.205 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-01 | — |
| 178.104.216.172 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-01 | — |
| 2.28.53.94 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-01 | — |
| 194.59.31.179 | 9714 | C2 | Remcos | — | — | BG | AS399486 | 2026-09-01 | — |
| 103.67.163.188 | 6161 | C2 | XWorm | — | — | VN | AS150895 | 2026-09-01 | — |
| 95.41.36.198 | 443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-01 | — |
| 95.40.176.172 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-01 | — |
| 185.9.17.250 | 443 | C2 | ValleyRAT | — | — | RO | AS9009 | 2026-09-01 | — |
| 95.41.69.117 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-01 | — |
| 95.40.209.24 | 8443 | C2 | ValleyRAT | — | — | US | AS16509 | 2026-09-01 | — |
| 69.72.83.130 | 443 | C2 | ValleyRAT | — | — | HK | AS45753 | 2026-09-01 | — |
| 43.154.230.182 | 443 | C2 | ValleyRAT | — | — | SG | AS132203 | 2026-09-01 | — |
| 69.72.83.130 | 2096 | C2 | ValleyRAT | — | — | HK | AS45753 | 2026-09-01 | — |
| 69.72.83.130 | 2083 | C2 | ValleyRAT | — | — | HK | AS45753 | 2026-09-01 | — |
| 69.72.83.130 | 8443 | C2 | ValleyRAT | — | — | HK | AS45753 | 2026-09-01 | — |
| 202.162.99.199 | 7878 | C2 | AsyncRAT | — | — | SG | AS152194 | 2026-09-01 | — |
| 103.45.66.107 | 7878 | C2 | AsyncRAT | — | — | HK | AS152194 | 2026-09-01 | — |
| 118.107.1.203 | 7878 | C2 | AsyncRAT | — | — | SG | AS152194 | 2026-09-01 | — |
| 46.225.104.177 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-09-01 | 2026-09-03 |
| 118.107.16.32 | 7878 | C2 | AsyncRAT | — | — | SG | AS152194 | 2026-09-01 | — |
| 38.18.228.183 | 56001 | C2 | PureRAT | — | — | US | AS397423 | 2026-09-01 | — |
| 31.77.220.180 | 443 | C2 | Vidar | — | — | US | AS213702 | 2026-09-01 | — |
| 91.219.236.190 | 56001 | C2 | PureRAT | — | — | HU | AS56322 | 2026-09-01 | — |
| 91.219.237.84 | 56001 | C2 | PureRAT | — | — | HU | AS56322 | 2026-09-01 | — |
| 104.254.90.162 | 28471 | C2 | PureRAT | — | — | CA | AS32489 | 2026-09-01 | 2026-09-07 |
| 151.241.99.28 | 56001 | C2 | PureRAT | — | — | AE | AS398256 | 2026-09-01 | — |
| 64.89.160.47 | 56001 | C2 | PureRAT | — | — | US | AS205759 | 2026-09-01 | — |
| 195.20.115.25 | 56001 | C2 | PureRAT | — | — | HU | AS56322 | 2026-09-01 | — |
| 163.245.205.142 | 56001 | C2 | PureRAT | — | — | US | AS19318 | 2026-09-01 | — |
| 181.215.47.151 | 56001 | C2 | PureRAT | — | — | AE | AS397423 | 2026-09-01 | — |
| 101.43.118.48 | 8888 | C2 | VShell | — | — | CN | AS45090 | 2026-09-01 | — |
| 1.13.179.86 | 9876 | C2 | VShell | — | — | CN | AS45090 | 2026-09-01 | — |
| 38.60.223.14 | 8848 | C2 | DCRat | — | — | US | AS154177 | 2026-09-01 | — |
| 5.89.184.173 | 443 | C2 | Unknown | — | — | IT | AS30722 | 2026-09-01 | — |
| 89.106.83.136 | 36366 | C2 | Sliver | — | — | DE | AS200051 | 2026-09-01 | — |
| 89.34.90.45 | 443 | C2 | Stealc | — | — | NL | AS207043 | 2026-09-01 | — |
| 149.104.90.17 | 31337 | C2 | Sliver | — | — | US | AS154177 | 2026-09-01 | — |
| 85.239.144.103 | 31337 | C2 | Sliver | — | — | BG | AS207043 | 2026-09-01 | — |
| 185.165.171.71 | 31337 | C2 | Sliver | — | — | IS | AS200651 | 2026-09-01 | — |
| 89.34.90.139 | 31337 | C2 | Sliver | — | — | NL | AS207043 | 2026-09-01 | — |
| 185.242.235.16 | 31337 | C2 | Sliver | — | — | HK | AS55933 | 2026-09-01 | — |
| 89.45.45.149 | 4785 | C2 | Quasar RAT | — | — | AE | AS209604 | 2026-09-01 | — |
| 91.92.144.21 | 55535 | C2 | Sliver | — | — | CY | AS44901 | 2026-09-01 | — |
| 159.223.5.148 | 4782 | C2 | Quasar RAT | — | — | US | AS14061 | 2026-09-01 | — |
| 187.209.68.66 | 4782 | C2 | Quasar RAT | — | — | MX | AS8151 | 2026-09-01 | — |
| 45.113.1.190 | 4782 | C2 | Quasar RAT | — | — | HK | AS401701 | 2026-09-01 | — |
| 91.92.40.195 | 4782 | C2 | Quasar RAT | — | — | BG | AS197170 | 2026-09-01 | — |