| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.240.41.142 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 82.38.148.128 | 2404 | C2 | Remcos | — | — | GB | AS215703 | 2026-10-21 | — |
| 206.123.137.162 | 56090 | C2 | Remcos | — | — | US | AS9009 | 2026-10-21 | 2026-10-22 |
| 159.223.89.103 | 23004 | C2 | Drifter | — | — | US | AS14061 | 2026-10-21 | — |
| 46.101.198.130 | 25632 | C2 | Drifter | — | — | US | AS14061 | 2026-10-21 | — |
| 46.101.249.247 | 23004 | C2 | Drifter | — | — | US | AS14061 | 2026-10-21 | — |
| 102.220.161.230 | 425 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-21 | — |
| 46.151.182.129 | 430 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-21 | — |
| 102.220.161.230 | 430 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-21 | — |
| 46.151.182.129 | 420 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-21 | — |
| 102.220.161.230 | 420 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-21 | — |
| 46.151.182.129 | 423 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-21 | — |
| 102.220.161.230 | 423 | C2 | Tofsee | — | — | NG | AS197769 | 2026-10-21 | — |
| 46.151.182.129 | 425 | C2 | Tofsee | — | — | NL | AS403005 | 2026-10-21 | — |
| 91.92.41.120 | 2026 | C2 | Remcos | — | — | BG | AS211443 | 2026-10-21 | 2026-10-22 |
| 156.240.41.136 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.137 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.133 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.134 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.135 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 109.237.98.251 | 8080 | C2 | Aisuru | — | — | RU | AS202799 | 2026-10-21 | — |
| 103.83.87.173 | 14753 | C2 | Remcos | — | — | TR | AS44382 | 2026-10-21 | 2026-10-22 |
| 147.124.221.97 | 2404 | C2 | Remcos | — | — | US | AS396073 | 2026-10-21 | 2026-10-22 |
| 45.91.202.47 | 1488 | C2 | Unknown Stealer | — | — | NL | AS211381 | 2026-10-21 | — |
| 156.240.41.130 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.131 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.132 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.129 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.13 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 172.111.150.137 | 36511 | C2 | Remcos | — | — | US | AS212238 | 2026-10-21 | — |
| 156.240.41.128 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.125 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.124 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.120 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.117 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 93.179.127.29 | 8889 | C2 | Sliver | — | — | CA | AS25820 | 2026-10-21 | — |
| 135.125.222.22 | 8040 | C2 | Sliver | — | — | FR | AS16276 | 2026-10-21 | — |
| 77.239.124.135 | 9111 | C2 | Unknown | — | — | US | AS198364 | 2026-10-21 | — |
| 37.60.141.43 | 8443 | C2 | Cobalt Strike | — | — | BG | AS213438 | 2026-10-21 | — |
| 5.226.55.130 | 8041 | C2 | Unknown RAT | — | — | AU | AS931 | 2026-10-21 | — |
| 20.163.34.31 | 8041 | C2 | Unknown RAT | — | — | US | AS8075 | 2026-10-21 | — |
| 162.250.120.241 | 8041 | C2 | Unknown RAT | — | — | US | AS19318 | 2026-10-21 | — |
| 167.94.158.48 | 8041 | C2 | Unknown RAT | — | — | SG | AS213122 | 2026-10-21 | — |
| 162.250.120.241 | 80 | Payload | Unknown RAT | — | — | US | AS19318 | 2026-10-21 | — |
| 4.148.0.165 | 80 | Payload | Unknown RAT | — | — | US | AS8075 | 2026-10-21 | — |
| 45.119.99.8 | 1800 | C2 | Remcos | — | — | HK | AS133199 | 2026-10-21 | — |
| 139.180.191.42 | 443 | C2 | Cobalt Strike | — | — | US | AS20473 | 2026-10-21 | — |
| 192.255.195.153 | 7030 | C2 | Remcos | — | — | US | AS36352 | 2026-10-21 | 2026-10-22 |
| 156.240.41.115 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |
| 156.240.41.114 | 8877 | C2 | VShell | — | — | SC | AS139646 | 2026-10-21 | — |