| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.12.182.79 | 429 | C2 | Tofsee | — | — | US | AS197769 | 2026-08-18 | — |
| 217.60.241.50 | 429 | C2 | Tofsee | — | — | AE | AS51396 | 2026-08-18 | — |
| 217.60.241.48 | 429 | C2 | Tofsee | — | — | AE | AS51396 | 2026-08-18 | — |
| 217.60.241.31 | 429 | C2 | Tofsee | — | — | AE | AS51396 | 2026-08-18 | — |
| 102.220.160.58 | 429 | C2 | Tofsee | — | — | NG | AS197769 | 2026-08-18 | — |
| 102.220.160.58 | 424 | C2 | Tofsee | — | — | NG | AS197769 | 2026-08-18 | — |
| 102.220.160.58 | 422 | C2 | Tofsee | — | — | NG | AS197769 | 2026-08-18 | — |
| 207.56.217.9 | 7811 | C2 | ValleyRAT | — | — | US | AS54801 | 2026-08-18 | — |
| 27.124.12.180 | 7800 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-18 | — |
| 27.124.12.180 | 7811 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-18 | — |
| 156.234.7.60 | 7800 | C2 | ValleyRAT | — | — | SC | AS138415 | 2026-08-18 | — |
| 156.234.7.60 | 7811 | C2 | ValleyRAT | — | — | SC | AS138415 | 2026-08-18 | — |
| 184.105.237.196 | 2600 | C2 | Nanocore RAT | — | — | US | AS6939 | 2026-08-18 | — |
| 216.218.135.118 | 2600 | C2 | Nanocore RAT | — | — | US | AS6939 | 2026-08-18 | — |
| 66.116.243.130 | 80 | Payload | Mirai | — | — | AE | AS394695 | 2026-08-18 | — |
| 147.182.224.216 | 80 | Payload | Mirai | — | — | US | AS14061 | 2026-08-18 | — |
| 154.90.70.23 | 80 | Payload | Mirai | — | — | SC | AS215925 | 2026-08-18 | — |
| 159.89.193.17 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | — |
| 43.136.178.239 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 43.136.178.239 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 39.105.200.188 | 18080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-18 | — |
| 43.136.178.239 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 43.136.178.239 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | 2026-08-19 |
| 64.227.187.82 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | — |
| 64.227.187.82 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-19 |
| 31.77.227.102 | 9506 | C2 | Mirai | — | — | US | AS198364 | 2026-08-18 | — |
| 31.77.227.102 | 9 | Payload | Mirai | — | — | US | AS198364 | 2026-08-18 | — |
| 142.93.205.111 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | — |
| 178.156.219.14 | 8592 | C2 | Remus | — | — | DE | AS213230 | 2026-08-18 | 2026-08-19 |
| 39.105.200.188 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-18 | — |
| 103.84.230.85 | 443 | C2 | Unknown | — | — | ID | AS55699 | 2026-08-18 | — |
| 103.253.27.96 | 443 | C2 | Unknown | — | — | SG | AS133210 | 2026-08-18 | — |
| 103.87.68.158 | 443 | C2 | Unknown | — | — | ID | AS150249 | 2026-08-18 | — |
| 94.26.106.206 | 80 | C2 | MooBot | — | — | BG | AS197170 | 2026-08-18 | — |
| 213.139.77.194 | 443 | C2 | Havoc | — | — | DE | AS398256 | 2026-08-18 | — |
| 37.187.222.170 | 80 | C2 | Nimplant | — | — | FR | AS16276 | 2026-08-18 | — |
| 216.128.179.190 | 7443 | C2 | Unknown | — | — | US | AS20473 | 2026-08-18 | 2026-08-19 |
| 217.77.6.50 | 443 | C2 | Quasar RAT | — | — | DE | AS40021 | 2026-08-18 | — |
| 46.19.143.117 | 1337 | C2 | Empire Downloader | — | — | PA | AS51852 | 2026-08-18 | — |
| 162.35.165.76 | 1337 | C2 | Empire Downloader | — | — | US | AS19318 | 2026-08-18 | — |
| 15.204.248.160 | 1337 | C2 | Empire Downloader | — | — | US | AS16276 | 2026-08-18 | — |
| 98.142.252.140 | 5000 | C2 | SectopRAT | — | — | CA | AS59711 | 2026-08-18 | — |
| 5.188.87.210 | 5000 | C2 | SectopRAT | — | — | RU | AS49453 | 2026-08-18 | — |
| 45.227.254.77 | 5000 | C2 | SectopRAT | — | — | PA | AS267784 | 2026-08-18 | — |
| 91.238.181.7 | 5000 | C2 | SectopRAT | — | — | DE | AS49434 | 2026-08-18 | — |
| 110.42.255.63 | 5432 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 110.42.255.63 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 8.138.151.0 | 9000 | C2 | VShell | — | — | SG | AS37963 | 2026-08-18 | — |
| 139.196.181.1 | 8809 | C2 | VShell | — | — | CN | AS37963 | 2026-08-18 | — |
| 194.182.87.116 | 80 | C2 | AdaptixC2 | — | — | IT | AS24806 | 2026-08-18 | — |