| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 154.91.59.123 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.122 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.105 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.123 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.121 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.120 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.116 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.114 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 213.218.160.253 | 4444 | C2 | Cobalt Strike | — | — | IS | AS200651 | 2026-09-12 | 2026-09-14 |
| 31.70.103.174 | 8000 | C2 | Cobalt Strike | — | — | DE | AS8560 | 2026-09-12 | 2026-09-18 |
| 47.121.130.18 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-09-12 | 2026-09-18 |
| 212.87.199.197 | 8081 | C2 | Cobalt Strike | — | — | TR | AS44620 | 2026-09-12 | 2026-09-13 |
| 43.155.246.58 | 80 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-09-12 | 2026-09-13 |
| 46.151.29.58 | 3232 | Payload | Unknown | — | — | AE | AS216071 | 2026-09-12 | — |
| 138.68.130.69 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 209.38.225.90 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 138.68.242.177 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 88.99.59.43 | 8213 | C2 | Remus | — | — | DE | AS24940 | 2026-09-12 | 2026-09-17 |
| 159.223.13.6 | 34567 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 165.227.142.229 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-16 |
| 93.152.221.22 | 3778 | C2 | Mirai | — | — | BG | AS197170 | 2026-09-12 | — |
| 159.65.59.117 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-15 |
| 138.197.211.43 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 165.22.113.73 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | 2026-09-16 |
| 159.89.207.12 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 138.197.211.43 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-09-12 | — |
| 146.190.42.34 | 5288 | C2 | Remus | — | — | US | AS14061 | 2026-09-12 | 2026-09-18 |
| 154.91.58.115 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.120 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.117 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.116 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.113 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.109 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.58.108 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.110 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 134.255.211.140 | 9300 | C2 | VShell | — | — | AT | AS9009 | 2026-09-12 | — |
| 154.91.57.100 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.57.122 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 167.172.142.69 | 8443 | C2 | Havoc | — | — | US | AS14061 | 2026-09-12 | — |
| 167.172.142.69 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-09-12 | — |
| 8.145.61.81 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-12 | — |
| 8.145.61.81 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-12 | — |
| 8.145.61.81 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-09-12 | — |
| 23.227.196.108 | 8443 | C2 | Cobalt Strike | — | — | US | AS29802 | 2026-09-12 | 2026-09-18 |
| 162.35.122.126 | 443 | C2 | Cobalt Strike | — | — | US | AS19318 | 2026-09-12 | 2026-09-18 |
| 139.199.160.80 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-12 | 2026-09-18 |
| 154.8.155.90 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-09-12 | — |
| 148.66.17.124 | 60003 | C2 | VShell | — | — | HK | AS45753 | 2026-09-12 | — |
| 79.175.118.111 | 8084 | C2 | VShell | — | — | RS | AS198588 | 2026-09-12 | — |