| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 47.108.25.113 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.96.254.114 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.236.130.154 | 3443 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-24 | — |
| 206.238.123.117 | 8080 | C2 | VShell | — | — | US | AS399077 | 2026-07-24 | — |
| 206.238.123.117 | 8443 | C2 | VShell | — | — | US | AS399077 | 2026-07-24 | — |
| 175.178.26.180 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-24 | — |
| 79.110.49.148 | 7777 | C2 | AsyncRAT | — | — | BG | AS399486 | 2026-07-24 | 2026-07-30 |
| 79.110.49.148 | 60 | C2 | AsyncRAT | — | — | BG | AS399486 | 2026-07-24 | 2026-07-30 |
| 79.110.49.148 | 1009 | C2 | AsyncRAT | — | — | BG | AS399486 | 2026-07-24 | 2026-07-30 |
| 23.94.145.121 | 80 | C2 | Tsundere | — | — | US | AS207043 | 2026-07-24 | 2026-07-30 |
| 198.211.101.176 | 443 | C2 | Eye Pyramid | — | — | US | AS14061 | 2026-07-24 | 2026-07-30 |
| 178.16.54.132 | 1987 | C2 | DCRat | — | — | TR | AS202412 | 2026-07-24 | 2026-07-30 |
| 157.20.182.22 | 4443 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-07-24 | 2026-07-30 |
| 157.20.182.21 | 4444 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-07-24 | 2026-07-30 |
| 206.238.123.117 | 10443 | C2 | VShell | — | — | US | AS399077 | 2026-07-24 | — |
| 206.238.123.117 | 80 | C2 | VShell | — | — | US | AS399077 | 2026-07-24 | — |
| 64.118.132.80 | 8084 | C2 | VShell | — | — | HK | AS138997 | 2026-07-24 | — |
| 60.185.67.143 | 8084 | C2 | VShell | — | — | CN | AS4134 | 2026-07-24 | — |
| 45.133.174.99 | 443 | C2 | XWorm | — | — | AE | AS210846 | 2026-07-24 | — |
| 42.193.22.177 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | 2026-07-30 |
| 54.46.14.24 | 8084 | C2 | VShell | — | — | US | AS16509 | 2026-07-24 | — |
| 47.100.94.78 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.97.47.29 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-24 | — |
| 198.98.53.100 | 8443 | C2 | Aisuru | — | — | US | AS53667 | 2026-07-24 | 2026-07-30 |
| 193.134.211.175 | 8443 | C2 | VShell | — | — | US | AS139659 | 2026-07-24 | — |
| 154.39.106.153 | 80 | C2 | Quasar RAT | — | — | US | AS18186 | 2026-07-24 | — |
| 104.168.22.209 | 8080 | C2 | VShell | — | — | US | AS36352 | 2026-07-24 | — |
| 20.230.138.200 | 22 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-07-24 | — |
| 20.230.138.200 | 443 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-07-24 | — |
| 20.230.138.200 | 8080 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-07-24 | — |
| 20.230.138.200 | 80 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-07-24 | — |
| 47.116.60.211 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.116.60.211 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.116.60.211 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-24 | — |
| 38.54.14.80 | 80 | C2 | VShell | — | — | US | AS138915 | 2026-07-24 | — |
| 103.27.109.233 | 2200 | C2 | Quasar RAT | — | — | HK | AS132883 | 2026-07-24 | — |
| 8.137.170.3 | 8443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.137.170.3 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.137.170.3 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.137.170.3 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 47.96.154.174 | 80 | C2 | Havoc | — | — | CN | AS37963 | 2026-07-24 | — |
| 176.126.245.210 | 80 | C2 | AdaptixC2 | — | — | GB | AS44684 | 2026-07-24 | — |
| 47.96.154.174 | 22 | C2 | Havoc | — | — | CN | AS37963 | 2026-07-24 | — |
| 47.96.154.174 | 8443 | C2 | Havoc | — | — | CN | AS37963 | 2026-07-24 | — |
| 181.235.4.60 | 8917 | C2 | AsyncRAT | — | — | CO | AS3816 | 2026-07-23 | — |
| 176.126.245.210 | 443 | C2 | AdaptixC2 | — | — | GB | AS44684 | 2026-07-23 | — |
| 176.126.245.210 | 8080 | C2 | AdaptixC2 | — | — | GB | AS44684 | 2026-07-23 | — |
| 117.72.178.246 | 4433 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-23 | — |
| 206.238.123.8 | 10443 | C2 | VShell | — | — | US | AS399077 | 2026-07-23 | — |
| 117.72.32.75 | 443 | C2 | Unknown | — | — | CN | AS141679 | 2026-07-23 | — |