| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 209.54.103.173 | 7080 | C2 | HypeAgent | — | — | US | AS36352 | 2026-08-19 | 2026-08-25 |
| 207.56.137.196 | 7080 | C2 | HypeAgent | — | — | US | AS54801 | 2026-08-19 | 2026-08-19 |
| 43.128.113.133 | 37215 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-22 |
| 201.79.5.223 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-19 | — |
| 43.128.113.133 | 9035 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-22 |
| 150.109.93.78 | 34567 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-22 |
| 150.109.93.78 | 8080 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-25 |
| 43.110.42.102 | 81 | C2 | VShell | — | — | SG | AS45102 | 2026-08-19 | — |
| 159.75.118.45 | 9090 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 38.60.125.131 | 443 | C2 | VShell | — | — | US | AS140869 | 2026-08-19 | — |
| 1.117.61.139 | 8080 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 45.115.124.43 | 1433 | C2 | VShell | — | — | HK | AS132839 | 2026-08-19 | — |
| 43.128.113.133 | 12345 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-19 |
| 43.134.49.218 | 9034 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-25 |
| 142.93.205.111 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-19 | 2026-08-25 |
| 43.134.49.218 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | — |
| 43.128.113.133 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-19 |
| 176.98.182.217 | 34567 | C2 | Aisuru | — | — | SG | AS198855 | 2026-08-19 | 2026-08-20 |
| 64.227.187.82 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-19 | 2026-08-20 |
| 159.89.193.17 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-19 | 2026-08-24 |
| 150.109.93.78 | 5555 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-19 | 2026-08-22 |
| 108.181.175.198 | 7707 | C2 | AsyncRAT | — | — | CA | AS40676 | 2026-08-19 | — |
| 108.181.175.198 | 6606 | C2 | AsyncRAT | — | — | CA | AS40676 | 2026-08-19 | — |
| 108.181.175.198 | 7000 | C2 | XWorm | — | — | CA | AS40676 | 2026-08-19 | — |
| 108.181.175.198 | 8808 | C2 | AsyncRAT | — | — | CA | AS40676 | 2026-08-19 | — |
| 193.26.115.28 | 443 | C2 | Unknown RAT | — | — | NL | AS210558 | 2026-08-19 | — |
| 74.207.198.32 | 8041 | C2 | Unknown RAT | — | — | US | AS401909 | 2026-08-19 | — |
| 104.168.115.94 | 2404 | C2 | Remcos | — | — | US | AS36352 | 2026-08-19 | — |
| 149.88.66.234 | 21 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-08-19 | — |
| 47.108.86.120 | 111 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | 2026-08-25 |
| 124.222.128.197 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 183.60.226.2 | 7000 | C2 | Unknown | — | — | CN | AS134763 | 2026-08-19 | — |
| 156.251.16.249 | 7800 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-19 | — |
| 156.251.16.249 | 7811 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-19 | — |
| 58.87.71.33 | 1999 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 47.98.102.101 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-19 | — |
| 196.251.107.252 | 24027 | C2 | Remcos | — | — | SC | AS214351 | 2026-08-19 | — |
| 202.61.84.89 | 7800 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-08-19 | — |
| 202.61.84.89 | 7811 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-08-19 | — |
| 47.94.224.229 | 888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-18 | — |
| 109.248.160.184 | 8080 | C2 | Havoc | — | — | CZ | AS56971 | 2026-08-18 | 2026-08-25 |
| 117.50.195.220 | 8443 | C2 | VShell | — | — | CN | AS23724 | 2026-08-18 | — |
| 149.88.66.234 | 8089 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-08-18 | — |
| 124.220.34.180 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 124.220.34.180 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 124.220.34.180 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |