| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.240.41.52 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 132.243.199.24 | 8443 | C2 | Aisuru | — | — | CY | AS201097 | 2026-10-22 | 2026-10-22 |
| 101.42.183.92 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-22 | — |
| 1.94.100.198 | 8888 | C2 | Cobalt Strike | — | — | CN | AS55990 | 2026-10-22 | — |
| 116.62.44.146 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-10-22 | — |
| 172.94.125.5 | 2404 | C2 | Remcos | — | — | US | AS9009 | 2026-10-22 | — |
| 74.201.173.193 | 17509 | C2 | Remcos | — | — | US | AS32475 | 2026-10-22 | 2026-10-22 |
| 156.240.41.5 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.43 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.47 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.40 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.42 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 207.57.167.40 | 444 | C2 | PureRAT | — | — | US | AS54801 | 2026-10-22 | — |
| 46.8.113.32 | 80 | C2 | Nimplant | — | — | CZ | AS215305 | 2026-10-22 | — |
| 162.243.44.223 | 4502 | C2 | Unknown RAT | — | — | US | AS14061 | 2026-10-22 | — |
| 52.86.95.53 | 443 | C2 | Unknown | — | — | US | AS14618 | 2026-10-22 | — |
| 44.195.239.154 | 443 | C2 | Unknown | — | — | US | AS14618 | 2026-10-22 | 2026-10-22 |
| 94.154.40.111 | 6448 | C2 | Remcos | — | — | UA | AS202412 | 2026-10-22 | — |
| 46.151.182.249 | 7004 | C2 | XWorm | — | — | NL | AS403005 | 2026-10-22 | — |
| 156.240.41.35 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.37 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.20 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.200 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.34 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 185.245.107.8 | 443 | C2 | Unknown Stealer | — | — | AE | AS216071 | 2026-10-22 | — |
| 165.232.95.242 | 80 | C2 | AMOS | — | — | US | AS14061 | 2026-10-22 | — |
| 94.154.32.128 | 20901 | C2 | Remcos | — | — | UA | AS214961 | 2026-10-22 | 2026-10-22 |
| 156.240.41.198 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.32 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.77 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.28 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.31 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.29 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.3 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.27 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 147.124.216.205 | 5151 | C2 | XWorm | — | — | US | AS396073 | 2026-10-22 | — |
| 185.114.206.92 | 49034 | C2 | Remcos | — | — | US | AS397373 | 2026-10-22 | 2026-10-22 |
| 178.16.53.15 | 7004 | C2 | XWorm | — | — | TR | AS202412 | 2026-10-22 | — |
| 104.128.191.55 | 8823 | C2 | XWorm | — | — | US | AS9009 | 2026-10-22 | — |
| 212.18.104.242 | 443 | C2 | Unknown | — | — | GB | AS215540 | 2026-10-22 | 2026-10-22 |
| 31.56.209.214 | 443 | C2 | XWorm | — | — | AE | AS209373 | 2026-10-22 | — |
| 156.240.41.252 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.26 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.251 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.250 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 156.240.41.243 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-22 | — |
| 107.173.226.218 | 5173 | C2 | Unknown | — | — | US | AS36352 | 2026-10-22 | — |
| 149.104.27.46 | 443 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-10-22 | 2026-10-22 |
| 124.223.22.132 | 33855 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-22 | 2026-10-22 |
| 124.220.22.82 | 18443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-10-22 | 2026-10-22 |