| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 60.205.123.176 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-09-12 | — |
| 154.91.56.101 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.61.106 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 124.223.188.23 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-12 | — |
| 50.114.172.219 | 20001 | C2 | VShell | — | — | US | AS8796 | 2026-09-12 | — |
| 124.223.188.23 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-12 | — |
| 124.223.188.23 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-09-12 | — |
| 154.91.56.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.110 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.112 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.59.113 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.126 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.122 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-12 | — |
| 154.91.60.110 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.60.114 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.60.116 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.60.109 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.63.106 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.63.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.63.102 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.63.116 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.57.103 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.61.118 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.61.107 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.61.110 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.61.112 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.61.114 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.62.113 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.62.118 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 154.91.62.103 | 8074 | C2 | VShell | — | — | SC | AS400619 | 2026-09-11 | — |
| 84.247.187.47 | 8818 | C2 | AsyncRAT | — | — | DE | AS51167 | 2026-09-11 | 2026-09-18 |
| 5.175.222.230 | 80 | C2 | Mirai | — | — | DE | AS215136 | 2026-09-11 | 2026-09-18 |
| 217.60.195.40 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-11 | 2026-09-18 |
| 217.60.195.40 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-09-11 | 2026-09-18 |
| 217.217.97.90 | 56003 | C2 | PureRAT | — | — | DE | AS214961 | 2026-09-11 | 2026-09-18 |
| 204.0.56.147 | 7443 | C2 | Unknown | — | — | US | AS214432 | 2026-09-11 | 2026-09-18 |
| 198.13.158.57 | 443 | C2 | Havoc | — | — | US | AS399629 | 2026-09-11 | 2026-09-18 |
| 196.251.121.124 | 443 | C2 | PureRAT | — | — | SC | AS205759 | 2026-09-11 | 2026-09-18 |
| 195.177.94.100 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-11 | 2026-09-18 |
| 195.177.94.100 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-11 | 2026-09-18 |
| 195.177.94.100 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-09-11 | 2026-09-18 |
| 194.32.142.225 | 22222 | C2 | Evilginx | — | — | KZ | AS48716 | 2026-09-11 | 2026-09-18 |
| 192.252.187.56 | 56002 | C2 | PureRAT | — | — | US | AS152194 | 2026-09-11 | 2026-09-18 |
| 191.93.113.119 | 1000 | C2 | DCRat | — | — | CO | AS13489 | 2026-09-11 | 2026-09-18 |
| 172.111.198.212 | 56003 | C2 | PureRAT | — | — | US | AS3223 | 2026-09-11 | 2026-09-18 |
| 158.94.209.209 | 3009 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-09-11 | 2026-09-18 |
| 144.31.6.37 | 443 | C2 | PureRAT | — | — | US | AS215730 | 2026-09-11 | 2026-09-18 |
| 118.107.16.32 | 56001 | C2 | PureRAT | — | — | SG | AS152194 | 2026-09-11 | 2026-09-18 |
| 105.101.131.181 | 7777 | C2 | AsyncRAT | — | — | DZ | AS36947 | 2026-09-11 | 2026-09-18 |
| 102.117.163.149 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-09-11 | 2026-09-18 |