| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 144.48.124.93 | 8877 | C2 | VShell | — | — | HK | AS132839 | 2026-08-28 | — |
| 144.48.124.93 | 1100 | C2 | VShell | — | — | HK | AS132839 | 2026-08-28 | — |
| 144.48.124.91 | 18111 | C2 | VShell | — | — | HK | AS132839 | 2026-08-28 | — |
| 45.194.37.221 | 8888 | C2 | ValleyRAT | — | — | SC | AS138995 | 2026-08-28 | — |
| 144.48.124.91 | 8877 | C2 | VShell | — | — | HK | AS132839 | 2026-08-28 | — |
| 49.235.130.208 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-28 | — |
| 45.63.43.183 | 8080 | C2 | Quasar RAT | — | — | US | AS20473 | 2026-08-28 | — |
| 43.143.14.43 | 8088 | C2 | VShell | — | — | CN | AS45090 | 2026-08-28 | — |
| 43.143.13.146 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-28 | — |
| 35.86.129.120 | 4782 | C2 | Quasar RAT | — | — | US | AS16509 | 2026-08-28 | — |
| 38.55.194.135 | 9980 | C2 | VShell | — | — | US | AS139659 | 2026-08-28 | — |
| 121.4.38.18 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-28 | — |
| 121.4.38.18 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-28 | — |
| 106.15.10.2 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-28 | — |
| 106.15.10.2 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-28 | — |
| 106.15.10.2 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-28 | — |
| 47.254.173.184 | 8443 | C2 | VShell | — | — | US | AS45102 | 2026-08-28 | — |
| 185.130.46.191 | 44885 | C2 | Cobalt Strike | — | — | BZ | AS210083 | 2026-08-27 | 2026-09-03 |
| 185.130.46.191 | 44884 | C2 | Cobalt Strike | — | — | BZ | AS210083 | 2026-08-27 | 2026-09-03 |
| 185.130.46.191 | 44882 | C2 | Cobalt Strike | — | — | BZ | AS210083 | 2026-08-27 | 2026-09-03 |
| 114.55.250.233 | 1128 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-27 | 2026-09-03 |
| 94.26.3.112 | 30173 | C2 | HypeAgent | — | — | BG | AS135392 | 2026-08-27 | 2026-09-03 |
| 94.154.43.60 | 80 | C2 | Mirai | — | — | UA | AS219502 | 2026-08-27 | 2026-09-03 |
| 89.125.13.158 | 36626 | C2 | HypeAgent | — | — | AE | AS213702 | 2026-08-27 | 2026-09-03 |
| 64.89.160.76 | 7443 | C2 | HypeAgent | — | — | US | AS205759 | 2026-08-27 | 2026-09-03 |
| 5.230.201.54 | 56003 | C2 | PureRAT | — | — | DE | AS200051 | 2026-08-27 | 2026-09-03 |
| 46.246.84.10 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-08-27 | 2026-09-03 |
| 45.94.31.187 | 56015 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-27 | 2026-09-03 |
| 217.60.102.3 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-27 | 2026-09-03 |
| 217.60.102.3 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-27 | 2026-09-03 |
| 192.229.115.243 | 56002 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-27 | 2026-09-03 |
| 191.252.184.198 | 1337 | C2 | Havoc | — | — | BR | AS27715 | 2026-08-27 | 2026-09-03 |
| 185.254.96.155 | 7000 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-27 | 2026-09-03 |
| 185.212.128.96 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-08-27 | 2026-09-03 |
| 185.212.128.90 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-08-27 | 2026-09-03 |
| 172.111.247.65 | 6666 | C2 | AsyncRAT | — | — | US | AS3223 | 2026-08-27 | 2026-09-03 |
| 172.111.198.212 | 3001 | C2 | PureRAT | — | — | US | AS3223 | 2026-08-27 | 2026-09-03 |
| 159.195.242.22 | 7443 | C2 | Unknown | — | — | DE | AS197540 | 2026-08-27 | 2026-09-03 |
| 157.20.182.21 | 1997 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-08-27 | 2026-09-03 |
| 154.201.82.108 | 56001 | C2 | PureRAT | — | — | SC | AS401696 | 2026-08-27 | 2026-09-03 |
| 154.201.82.106 | 56001 | C2 | PureRAT | — | — | SC | AS401696 | 2026-08-27 | 2026-09-03 |
| 154.198.49.31 | 8444 | C2 | Unknown | — | — | SC | AS138995 | 2026-08-27 | 2026-09-03 |
| 134.122.187.68 | 56003 | C2 | PureRAT | — | — | SG | AS152194 | 2026-08-27 | 2026-09-03 |
| 134.122.187.68 | 56002 | C2 | PureRAT | — | — | SG | AS152194 | 2026-08-27 | 2026-09-03 |
| 134.122.187.68 | 56001 | C2 | PureRAT | — | — | SG | AS152194 | 2026-08-27 | 2026-09-03 |
| 105.155.16.5 | 5000 | C2 | AsyncRAT | — | — | MA | AS36903 | 2026-08-27 | 2026-09-03 |
| 105.111.84.214 | 443 | C2 | PureRAT | — | — | DZ | AS36947 | 2026-08-27 | 2026-09-03 |
| 104.243.248.63 | 302 | C2 | AsyncRAT | — | — | US | AS3223 | 2026-08-27 | 2026-09-03 |
| 103.54.153.49 | 56003 | C2 | PureRAT | — | — | SG | AS136557 | 2026-08-27 | 2026-09-03 |
| 102.117.174.189 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-08-27 | 2026-09-03 |