| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 165.227.142.229 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-13 | 2026-09-16 |
| 83.229.123.249 | 8443 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 83.229.123.249 | 54321 | C2 | Cobalt Strike | — | — | HK | AS139659 | 2026-09-13 | — |
| 111.170.148.132 | 10002 | C2 | Unknown | — | — | CN | AS151185 | 2026-09-13 | — |
| 154.91.61.125 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-13 | — |
| 3.87.86.71 | 7443 | C2 | Unknown | — | — | US | AS14618 | 2026-09-13 | — |
| 148.66.17.122 | 60003 | C2 | VShell | — | — | HK | AS45753 | 2026-09-13 | — |
| 5.104.86.108 | 8089 | C2 | Cobalt Strike | — | — | DE | AS141995 | 2026-09-13 | 2026-09-19 |
| 49.233.202.218 | 7878 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-13 | 2026-09-19 |
| 148.66.17.123 | 60003 | C2 | VShell | — | — | HK | AS45753 | 2026-09-13 | — |
| 148.66.17.125 | 60003 | C2 | VShell | — | — | HK | AS45753 | 2026-09-13 | — |
| 154.91.61.98 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-13 | — |
| 154.91.61.124 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-13 | — |
| 154.91.62.100 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-13 | — |
| 47.95.222.141 | 1234 | C2 | VShell | — | — | CN | AS37963 | 2026-09-13 | — |
| 42.194.137.92 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-13 | — |
| 148.66.17.126 | 60003 | C2 | VShell | — | — | HK | AS45753 | 2026-09-13 | — |
| 120.26.120.83 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-13 | — |
| 20.218.121.193 | 7000 | C2 | Quasar RAT | — | — | US | AS8075 | 2026-09-13 | — |
| 124.221.1.207 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-13 | — |
| 154.46.30.12 | 8080 | C2 | Havoc | — | — | US | AS203919 | 2026-09-13 | — |
| 38.76.190.209 | 8787 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-13 | — |
| 38.76.190.209 | 7500 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-13 | — |
| 38.76.190.209 | 8080 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-13 | — |
| 38.76.190.209 | 22 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-13 | — |
| 38.76.190.209 | 7000 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-12 | — |
| 38.76.190.209 | 80 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-12 | — |
| 38.76.190.209 | 443 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-09-12 | — |
| 59.110.153.133 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-12 | — |
| 154.91.56.113 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.56.112 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.56.111 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 111.170.148.132 | 37111 | C2 | Unknown | — | — | CN | AS151185 | 2026-09-12 | — |
| 154.91.56.116 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 188.166.249.116 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-14 |
| 156.229.165.166 | 53 | C2 | XMRIG | — | — | SC | AS213169 | 2026-09-12 | — |
| 194.116.236.129 | 53 | C2 | XMRIG | — | — | TR | AS44382 | 2026-09-12 | — |
| 216.9.226.82 | 53 | C2 | XMRIG | — | — | US | AS44382 | 2026-09-12 | — |
| 107.175.114.96 | 53 | C2 | XMRIG | — | — | US | AS36352 | 2026-09-12 | — |
| 156.229.165.166 | 443 | C2 | XMRIG | — | — | SC | AS213169 | 2026-09-12 | — |
| 194.116.236.129 | 443 | C2 | XMRIG | — | — | TR | AS44382 | 2026-09-12 | — |
| 216.9.226.82 | 443 | C2 | XMRIG | — | — | US | AS44382 | 2026-09-12 | — |
| 107.175.114.96 | 443 | C2 | XMRIG | — | — | US | AS36352 | 2026-09-12 | — |
| 3.70.251.33 | 443 | C2 | Unknown | — | — | US | AS16509 | 2026-09-12 | — |
| 54.95.7.136 | 3232 | C2 | Unknown | — | — | US | AS16509 | 2026-09-12 | — |
| 209.99.188.193 | 54501 | C2 | AdaptixC2 | — | — | KN | AS402253 | 2026-09-12 | — |
| 47.118.26.230 | 8888 | C2 | VShell | — | — | CN | AS37963 | 2026-09-12 | — |
| 47.115.229.78 | 8089 | C2 | VShell | — | — | CN | AS37963 | 2026-09-12 | — |
| 52.141.89.123 | 7443 | C2 | Unknown | — | — | US | AS8075 | 2026-09-12 | 2026-09-19 |
| 45.192.226.20 | 56003 | C2 | PureRAT | — | — | SC | AS138995 | 2026-09-12 | 2026-09-19 |