| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 154.91.60.105 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.60.101 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.59.109 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.59.100 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.58.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 162.217.248.219 | 9467 | C2 | XWorm | — | — | GB | AS213535 | 2026-09-18 | 2026-09-18 |
| 154.91.59.112 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.59.104 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.58.113 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.58.112 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.58.109 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.58.106 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.57.98 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.57.118 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.57.115 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.57.110 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.57.105 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.56.116 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 46.151.182.200 | 19191 | C2 | Bashlite | — | — | NL | AS36680 | 2026-09-18 | — |
| 154.91.56.113 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.56.106 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.56.100 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 134.122.202.217 | 8888 | C2 | Unknown | — | — | SG | AS152194 | 2026-09-18 | — |
| 134.122.202.217 | 22 | C2 | Unknown | — | — | SG | AS152194 | 2026-09-18 | — |
| 36.255.97.162 | 4045 | C2 | Cobalt Strike | — | — | PK | AS36680 | 2026-09-18 | 2026-09-24 |
| 103.101.85.26 | 443 | C2 | Unknown | — | — | GB | AS199479 | 2026-09-18 | — |
| 206.123.137.132 | 57484 | C2 | Remcos | — | — | US | AS9009 | 2026-09-18 | 2026-09-22 |
| 45.194.92.41 | 18129 | C2 | Mirai | — | — | SC | AS215925 | 2026-09-18 | — |
| 64.89.160.15 | 6969 | C2 | CECbot | — | — | US | AS205759 | 2026-09-18 | — |
| 217.60.103.96 | 6969 | C2 | CECbot | — | — | AE | AS209373 | 2026-09-18 | — |
| 94.154.43.235 | 6969 | C2 | CECbot | — | — | UA | AS219502 | 2026-09-18 | — |
| 62.60.226.173 | 10213 | C2 | CECbot | — | — | IR | AS214351 | 2026-09-18 | 2026-09-24 |
| 154.91.63.98 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.119 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.111 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.110 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.108 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.107 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.63.101 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.62.99 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.62.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 155.254.99.109 | 8041 | C2 | Unknown RAT | — | — | AU | AS931 | 2026-09-18 | — |
| 130.12.181.199 | 8443 | C2 | CECbot | — | — | US | AS197769 | 2026-09-18 | — |
| 62.60.226.111 | 443 | C2 | CECbot | — | — | IR | AS214351 | 2026-09-18 | — |
| 217.60.103.96 | 443 | C2 | CECbot | — | — | AE | AS209373 | 2026-09-18 | — |
| 94.154.43.235 | 8443 | C2 | CECbot | — | — | UA | AS219502 | 2026-09-18 | — |
| 64.89.160.15 | 8443 | C2 | CECbot | — | — | US | AS205759 | 2026-09-18 | — |
| 217.60.103.96 | 80 | C2 | CECbot | — | — | AE | AS209373 | 2026-09-18 | — |
| 141.98.10.26 | 6969 | C2 | CECbot | — | — | LT | AS209605 | 2026-09-18 | — |