| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 117.72.178.246 | 9000 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 39.106.205.6 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 154.12.86.154 | 22222 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-07-15 | — |
| 117.72.178.246 | 3306 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 117.72.178.246 | 4434 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 107.174.254.62 | 9443 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 139.199.89.128 | 7000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 8090 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 18080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 8317 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 34.92.128.98 | 22 | C2 | Cobalt Strike | — | — | US | AS396982 | 2026-07-15 | — |
| 192.253.228.193 | 4412 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-07-15 | — |
| 192.253.228.193 | 4411 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-07-15 | — |
| 82.157.78.201 | 3389 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 116.198.233.179 | 7977 | C2 | Cobalt Strike | — | — | CN | AS137699 | 2026-07-15 | — |
| 81.70.21.248 | 8001 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.155.157.79 | 81 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 64.89.160.127 | 2026 | C2 | AsyncRAT | — | — | US | AS205759 | 2026-07-15 | 2026-07-22 |
| 64.23.182.12 | 3333 | C2 | Evilginx | — | — | US | AS14061 | 2026-07-15 | 2026-07-22 |
| 5.56.25.238 | 8808 | C2 | AsyncRAT | — | — | UA | AS53850 | 2026-07-15 | 2026-07-22 |
| 216.250.249.83 | 8808 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-22 |
| 216.250.249.83 | 7707 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-22 |
| 204.44.93.75 | 14649 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 204.44.93.75 | 14648 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 185.212.131.22 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-07-15 | 2026-07-22 |
| 185.115.164.59 | 7723 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-22 |
| 178.73.192.16 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-07-15 | 2026-07-22 |
| 162.35.175.224 | 3333 | C2 | Evilginx | — | — | US | AS19318 | 2026-07-15 | 2026-07-22 |
| 104.225.104.237 | 3020 | C2 | DCRat | — | — | US | AS36236 | 2026-07-15 | 2026-07-22 |
| 104.168.134.25 | 7707 | C2 | AsyncRAT | — | — | US | AS54290 | 2026-07-15 | 2026-07-22 |
| 103.83.86.48 | 2404 | C2 | Remcos | — | — | TR | AS44382 | 2026-07-15 | 2026-07-22 |
| 103.11.41.10 | 17328 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-22 |
| 116.198.233.179 | 4434 | C2 | Cobalt Strike | — | — | CN | AS137699 | 2026-07-15 | — |
| 14.29.160.181 | 22 | C2 | Cobalt Strike | — | — | CN | AS4134 | 2026-07-15 | — |
| 14.29.160.181 | 123 | C2 | Cobalt Strike | — | — | CN | AS4134 | 2026-07-15 | — |
| 113.19.109.137 | 8635 | Payload | Mirai | — | — | PH | AS17639 | 2026-07-15 | — |
| 81.70.21.248 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 81.70.21.248 | 4369 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 117.72.159.215 | 8081 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 8.152.212.104 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-15 | — |
| 159.65.26.135 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 178.128.38.77 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 164.92.183.242 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 39.106.80.126 | 7000 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 39.106.80.126 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 115.190.161.178 | 3306 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-07-15 | — |
| 124.220.6.158 | 3306 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 115.190.161.178 | 22 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-07-15 | — |
| 8.219.76.168 | 22 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-07-15 | — |
| 124.220.6.158 | 21 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |