| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 1.14.100.25 | 8089 | C2 | VShell | — | — | CN | AS45090 | 2026-09-22 | — |
| 221.236.125.241 | 2222 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-22 | — |
| 221.236.125.241 | 23 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-22 | — |
| 221.236.125.241 | 22 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-22 | — |
| 221.236.125.241 | 21 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-22 | — |
| 122.51.215.90 | 5173 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-22 | — |
| 54.250.169.207 | 8888 | C2 | Unknown | — | — | US | AS16509 | 2026-09-22 | — |
| 54.250.169.207 | 8090 | C2 | Unknown | — | — | US | AS16509 | 2026-09-22 | — |
| 54.250.169.207 | 4993 | C2 | Unknown | — | — | US | AS16509 | 2026-09-21 | — |
| 54.250.169.207 | 80 | C2 | Unknown | — | — | US | AS16509 | 2026-09-21 | — |
| 54.250.169.207 | 22 | C2 | Unknown | — | — | US | AS16509 | 2026-09-21 | — |
| 43.139.191.248 | 4443 | C2 | VShell | — | — | CN | AS45090 | 2026-09-21 | — |
| 101.34.208.175 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-21 | — |
| 101.34.208.175 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-21 | — |
| 101.34.208.175 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-21 | — |
| 221.236.125.241 | 60000 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 221.236.125.241 | 9192 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 13.143.66.14 | 1370 | C2 | XWorm | — | — | US | AS215590 | 2026-09-21 | — |
| 89.39.121.145 | 1370 | C2 | XWorm | — | — | AE | AS215439 | 2026-09-21 | — |
| 221.236.125.241 | 8081 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 221.236.125.241 | 8080 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 221.236.125.241 | 80 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 221.236.125.241 | 443 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 221.236.125.241 | 5900 | C2 | Unknown | — | — | CN | AS4134 | 2026-09-21 | — |
| 43.224.224.72 | 7800 | C2 | ValleyRAT | — | — | HK | AS400619 | 2026-09-21 | — |
| 202.61.85.50 | 7800 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-09-21 | — |
| 202.61.85.50 | 7811 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-09-21 | — |
| 43.229.112.98 | 6667 | C2 | ValleyRAT | — | — | US | AS138415 | 2026-09-21 | — |
| 192.253.228.137 | 7800 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-09-21 | — |
| 192.253.228.137 | 7811 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-09-21 | — |
| 154.82.92.12 | 7800 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-09-21 | — |
| 154.82.92.12 | 7811 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-09-21 | — |
| 41.41.128.115 | 5005 | C2 | Quasar RAT | — | — | EG | AS8452 | 2026-09-21 | 2026-09-23 |
| 103.212.186.151 | 8085 | C2 | VShell | — | — | HK | AS401701 | 2026-09-21 | — |
| 206.119.167.115 | 13470 | C2 | VShell | — | — | US | AS133199 | 2026-09-21 | — |
| 104.233.217.124 | 9090 | C2 | VShell | — | — | US | AS54600 | 2026-09-21 | — |
| 84.32.41.19 | 56003 | C2 | PureRAT | — | — | LT | AS201579 | 2026-09-21 | 2026-09-28 |
| 72.83.221.122 | 2284 | C2 | Unknown | — | — | US | AS701 | 2026-09-21 | 2026-09-28 |
| 66.179.29.5 | 6000 | C2 | PureRAT | — | — | GB | AS215674 | 2026-09-21 | 2026-09-28 |
| 46.151.182.67 | 56002 | C2 | PureRAT | — | — | NL | AS36680 | 2026-09-21 | 2026-09-28 |
| 38.60.136.202 | 443 | C2 | Havoc | — | — | US | AS154177 | 2026-09-21 | 2026-09-28 |
| 31.56.209.139 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-21 | 2026-09-28 |
| 31.56.209.139 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-21 | 2026-09-28 |
| 193.112.254.32 | 8989 | C2 | AdaptixC2 | — | — | CN | AS45090 | 2026-09-21 | 2026-09-28 |
| 188.120.255.247 | 443 | C2 | PureRAT | — | — | RU | AS29182 | 2026-09-21 | 2026-09-28 |
| 177.5.67.246 | 55443 | C2 | AdaptixC2 | — | — | HK | AS137535 | 2026-09-21 | 2026-09-28 |
| 149.56.206.68 | 80 | C2 | Mirai | — | — | CA | AS16276 | 2026-09-21 | 2026-09-28 |
| 149.104.78.139 | 7443 | C2 | Unknown | — | — | US | AS154177 | 2026-09-21 | 2026-09-28 |
| 147.93.191.75 | 40100 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-09-21 | 2026-09-28 |
| 134.19.177.62 | 56002 | C2 | PureRAT | — | — | NL | AS49453 | 2026-09-21 | 2026-09-28 |