| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.240.41.111 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.112 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.113 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 89.19.222.64 | 8080 | C2 | Aisuru | — | — | RU | AS201097 | 2026-10-21 | — |
| 156.240.41.110 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.11 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.109 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.107 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.108 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 154.64.250.38 | 4167 | C2 | ValleyRAT | — | — | US | AS979 | 2026-10-21 | — |
| 156.240.41.104 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.105 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.102 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.101 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.100 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 23.132.164.207 | 2404 | C2 | Remcos | — | — | US | AS401626 | 2026-10-21 | — |
| 173.249.215.187 | 39221 | C2 | Remcos | — | — | US | AS11878 | 2026-10-21 | — |
| 209.54.102.133 | 14642 | C2 | Remcos | — | — | US | AS36352 | 2026-10-21 | 2026-10-22 |
| 172.94.111.51 | 2404 | C2 | Remcos | — | — | US | AS9009 | 2026-10-21 | 2026-10-21 |
| 47.92.113.149 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-10-21 | — |
| 176.97.117.157 | 80 | C2 | VShell | — | — | UA | AS43180 | 2026-10-21 | — |
| 156.240.41.82 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.93 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.6 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 91.92.41.72 | 2404 | C2 | Remcos | — | — | BG | AS211443 | 2026-10-20 | — |
| 8.148.27.183 | 12325 | C2 | NjRAT | — | — | SG | AS37963 | 2026-10-20 | — |
| 156.240.41.55 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.48 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.49 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.51 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.36 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 128.90.113.3 | 3000 | C2 | Remcos | — | — | US | AS40861 | 2026-10-20 | 2026-10-21 |
| 156.240.41.4 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.39 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.193 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.253 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 31.207.7.129 | 1515 | C2 | Remcos | — | — | AE | AS218731 | 2026-10-20 | 2026-10-21 |
| 156.240.41.229 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.233 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.222 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.204 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 38.54.40.15 | 17251 | C2 | VShell | — | — | US | AS154177 | 2026-10-20 | — |
| 156.240.41.177 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.154 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.169 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.17 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 156.240.41.149 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-20 | — |
| 2.56.3.177 | 47 | C2 | NjRAT | — | — | LT | AS207003 | 2026-10-20 | — |
| 1.92.135.168 | 8032 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-10-20 | 2026-10-22 |
| 88.119.168.238 | 8443 | C2 | Evilginx | — | — | LT | AS61272 | 2026-10-20 | 2026-10-22 |