| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 47.102.200.89 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-25 | — |
| 119.29.5.85 | 10443 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 60.205.115.92 | 44323 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 80 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 443 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 22 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 189.141.45.95 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-07-25 | — |
| 103.101.85.103 | 4747 | C2 | Quasar RAT | — | — | GB | AS207567 | 2026-07-25 | — |
| 203.195.217.161 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 182.92.117.223 | 1234 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 111.170.148.134 | 9000 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 81.70.95.138 | 4444 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 134.175.86.167 | 21111 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 122.51.215.90 | 10011 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 111.170.148.134 | 9443 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 87.76.146.91 | 1604 | C2 | NjRAT | — | — | UA | AS15924 | 2026-07-25 | — |
| 111.170.148.134 | 7791 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 3310 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 888 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 8080 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 216.250.255.1 | 9000 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-25 | — |
| 209.200.246.194 | 34586 | C2 | Cobalt Strike | — | — | US | AS215311 | 2026-07-24 | 2026-07-31 |
| 103.193.150.74 | 8087 | C2 | Cobalt Strike | — | — | HK | AS55933 | 2026-07-24 | 2026-07-31 |
| 111.170.148.134 | 80 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-24 | — |
| 111.170.148.134 | 443 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-24 | — |
| 175.43.223.202 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-07-24 | — |
| 111.230.238.243 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 111.230.238.243 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 111.230.238.243 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 47.96.154.174 | 443 | C2 | Havoc | — | — | CN | AS37963 | 2026-07-24 | — |
| 1.94.106.150 | 9999 | C2 | VShell | — | — | CN | AS55990 | 2026-07-24 | — |
| 82.156.166.227 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-24 | — |
| 106.52.255.211 | 9000 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-24 | — |
| 113.44.90.0 | 8000 | C2 | Unknown | — | — | CN | AS55990 | 2026-07-24 | — |
| 103.101.85.111 | 4747 | C2 | Quasar RAT | — | — | GB | AS207567 | 2026-07-24 | — |
| 111.228.62.67 | 8000 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 47.129.159.160 | 8888 | C2 | DCRat | — | — | US | AS16509 | 2026-07-24 | — |
| 195.20.115.53 | 2004 | C2 | DCRat | — | — | HU | AS56322 | 2026-07-24 | — |
| 12.187.175.73 | 7878 | C2 | DCRat | — | — | US | AS7018 | 2026-07-24 | — |
| 87.251.64.204 | 63812 | C2 | AdaptixC2 | — | — | RU | AS212835 | 2026-07-24 | 2026-07-31 |
| 46.246.12.2 | 2512 | C2 | DCRat | — | — | SE | AS42708 | 2026-07-24 | 2026-07-31 |
| 45.11.59.152 | 43200 | C2 | AdaptixC2 | — | — | UA | AS43641 | 2026-07-24 | 2026-07-31 |
| 38.60.220.51 | 7443 | C2 | Unknown | — | — | US | AS154177 | 2026-07-24 | 2026-07-31 |
| 23.94.252.7 | 80 | C2 | Tsundere | — | — | US | AS207043 | 2026-07-24 | 2026-07-31 |
| 2.27.248.80 | 80 | C2 | Tsundere | — | — | US | AS207043 | 2026-07-24 | 2026-07-31 |
| 193.93.194.42 | 57301 | C2 | AdaptixC2 | — | — | RU | AS62212 | 2026-07-24 | 2026-07-31 |
| 185.212.129.117 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-07-24 | 2026-07-31 |
| 158.94.211.191 | 8848 | C2 | DCRat | — | — | TR | AS202412 | 2026-07-24 | 2026-07-31 |
| 157.20.182.21 | 1992 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-07-24 | 2026-07-31 |
| 156.247.47.110 | 8848 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |