| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 106.15.10.2 | 4369 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-31 | — |
| 106.15.10.2 | 111 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-31 | — |
| 123.56.83.34 | 9999 | C2 | VShell | — | — | CN | AS37963 | 2026-08-31 | — |
| 106.54.41.209 | 21118 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-31 | — |
| 117.72.202.93 | 8080 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-31 | — |
| 117.72.202.93 | 443 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-31 | — |
| 47.105.114.163 | 9999 | C2 | VShell | — | — | CN | AS37963 | 2026-08-31 | — |
| 101.42.136.73 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 101.42.136.73 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 156.251.11.58 | 935 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-31 | — |
| 156.251.11.58 | 936 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-31 | — |
| 150.158.102.111 | 5003 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-31 | — |
| 112.213.103.58 | 5812 | C2 | AsyncRAT | — | — | HK | AS152194 | 2026-08-30 | — |
| 112.213.103.17 | 1217 | C2 | AsyncRAT | — | — | HK | AS152194 | 2026-08-30 | — |
| 101.42.136.73 | 8443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | 2026-09-06 |
| 101.42.136.73 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | 2026-09-06 |
| 150.158.102.111 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | — |
| 150.158.102.111 | 8082 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | — |
| 150.158.102.111 | 85 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | 2026-09-06 |
| 109.236.50.145 | 22 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | — |
| 150.158.102.111 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | — |
| 150.158.102.111 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | — |
| 150.158.102.111 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-30 | — |
| 104.168.102.116 | 22 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-08-30 | — |
| 104.168.102.116 | 8080 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-08-30 | — |
| 104.168.102.116 | 80 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-08-30 | 2026-09-03 |
| 104.168.102.116 | 443 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-08-30 | 2026-09-06 |
| 109.236.50.145 | 8443 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | — |
| 109.236.50.145 | 8080 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | 2026-09-02 |
| 109.236.50.145 | 80 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | 2026-09-06 |
| 109.236.50.145 | 443 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | — |
| 109.236.50.145 | 8888 | C2 | Cobalt Strike | — | — | TR | AS60781 | 2026-08-30 | 2026-09-06 |
| 94.228.166.168 | 56002 | C2 | PureRAT | — | — | RU | AS203273 | 2026-08-30 | 2026-09-06 |
| 91.219.239.81 | 972 | C2 | AsyncRAT | — | — | HU | AS56322 | 2026-08-30 | 2026-09-06 |
| 45.225.135.156 | 56003 | C2 | PureRAT | — | — | PA | AS64107 | 2026-08-30 | 2026-09-06 |
| 217.60.195.109 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-30 | 2026-09-06 |
| 217.60.195.109 | 56001 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-30 | 2026-09-06 |
| 195.177.94.188 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-08-30 | 2026-09-06 |
| 195.177.94.188 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-08-30 | 2026-09-06 |
| 194.59.30.96 | 7443 | C2 | HypeAgent | — | — | BG | AS399486 | 2026-08-30 | 2026-09-06 |
| 185.112.59.115 | 443 | C2 | PureRAT | — | — | RU | AS209207 | 2026-08-30 | 2026-09-06 |
| 172.86.122.177 | 443 | C2 | PureRAT | — | — | US | AS14956 | 2026-08-30 | 2026-09-06 |
| 162.243.160.70 | 8443 | C2 | Havoc | — | — | US | AS14061 | 2026-08-30 | 2026-09-06 |
| 160.119.69.30 | 5555 | C2 | AsyncRAT | — | — | SC | AS49870 | 2026-08-30 | 2026-09-06 |
| 144.31.6.6 | 56002 | C2 | PureRAT | — | — | US | AS215730 | 2026-08-30 | 2026-09-06 |
| 144.31.6.6 | 56001 | C2 | PureRAT | — | — | US | AS215730 | 2026-08-30 | 2026-09-06 |
| 144.31.6.6 | 443 | C2 | PureRAT | — | — | US | AS215730 | 2026-08-30 | 2026-09-06 |
| 144.31.106.168 | 80 | C2 | Chaos | — | — | US | AS210457 | 2026-08-30 | 2026-09-06 |
| 144.31.106.168 | 443 | C2 | Chaos | — | — | US | AS210457 | 2026-08-30 | 2026-09-06 |
| 102.117.167.19 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-08-30 | 2026-09-06 |