| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 31.207.38.75 | 8080 | C2 | Havoc | — | — | FR | AS210403 | 2026-08-26 | — |
| 31.207.38.75 | 443 | C2 | Havoc | — | — | FR | AS210403 | 2026-08-26 | — |
| 31.207.38.75 | 80 | C2 | Havoc | — | — | FR | AS210403 | 2026-08-26 | — |
| 116.213.43.170 | 216 | C2 | ValleyRAT | — | — | HK | AS400619 | 2026-08-26 | — |
| 124.222.57.34 | 9999 | C2 | VShell | — | — | CN | AS45090 | 2026-08-26 | — |
| 134.255.211.140 | 80 | C2 | VShell | — | — | AT | AS9009 | 2026-08-26 | — |
| 118.107.25.243 | 7010 | C2 | VShell | — | — | SG | AS152194 | 2026-08-26 | — |
| 117.72.40.1 | 8443 | C2 | VShell | — | — | CN | AS141679 | 2026-08-26 | — |
| 47.92.216.249 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-26 | — |
| 205.234.170.195 | 80 | C2 | VShell | — | — | US | AS142036 | 2026-08-26 | — |
| 185.242.3.178 | 8080 | C2 | VShell | — | — | NL | AS401626 | 2026-08-26 | — |
| 207.57.123.59 | 8086 | C2 | VShell | — | — | US | AS139659 | 2026-08-25 | — |
| 150.109.94.129 | 6666 | C2 | VShell | — | — | SG | AS132203 | 2026-08-25 | 2026-08-28 |
| 124.198.132.77 | 1458 | C2 | DCRat | — | — | NL | AS210558 | 2026-08-25 | 2026-08-31 |
| 160.25.140.132 | 443 | C2 | AsyncRAT | — | — | MY | AS152742 | 2026-08-25 | 2026-08-26 |
| 94.96.192.87 | 3055 | C2 | Xtreme RAT | — | — | SA | AS25019 | 2026-08-25 | — |
| 196.188.116.63 | 31337 | C2 | Sliver | — | — | ET | AS24757 | 2026-08-25 | — |
| 151.241.154.42 | 31337 | C2 | Sliver | — | — | AE | AS399486 | 2026-08-25 | — |
| 195.58.140.131 | 33300 | C2 | Sliver | — | — | US | AS395092 | 2026-08-25 | — |
| 91.193.18.177 | 4783 | C2 | Quasar RAT | — | — | BG | AS59711 | 2026-08-25 | — |
| 207.56.26.2 | 2222 | C2 | PureRAT | — | — | US | AS54801 | 2026-08-25 | 2026-08-31 |
| 207.56.26.11 | 2222 | C2 | PureRAT | — | — | US | AS54801 | 2026-08-25 | 2026-08-31 |
| 119.45.225.53 | 8889 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-25 | 2026-08-31 |
| 89.116.73.207 | 9820 | C2 | Remus | — | — | LT | AS47583 | 2026-08-25 | 2026-08-25 |
| 207.180.248.154 | 7242 | C2 | Remus | — | — | DE | AS51167 | 2026-08-25 | — |
| 101.42.255.92 | 9999 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-25 | — |
| 66.235.175.82 | 7443 | C2 | HypeAgent | — | — | US | AS397423 | 2026-08-25 | 2026-08-31 |
| 66.179.29.5 | 5000 | C2 | PureRAT | — | — | GB | AS215674 | 2026-08-25 | 2026-08-31 |
| 66.179.29.5 | 2000 | C2 | PureRAT | — | — | GB | AS215674 | 2026-08-25 | 2026-08-31 |
| 64.89.160.140 | 7443 | C2 | HypeAgent | — | — | US | AS205759 | 2026-08-25 | 2026-08-31 |
| 64.89.160.140 | 7040 | C2 | HypeAgent | — | — | US | AS205759 | 2026-08-25 | 2026-08-31 |
| 45.61.178.41 | 3333 | C2 | Evilginx | — | — | US | AS14956 | 2026-08-25 | 2026-08-31 |
| 45.145.41.185 | 6767 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-25 | 2026-08-31 |
| 38.54.88.188 | 65533 | C2 | AdaptixC2 | — | — | US | AS154177 | 2026-08-25 | 2026-08-31 |
| 37.244.224.146 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-08-25 | 2026-08-31 |
| 23.226.68.34 | 443 | C2 | PureRAT | — | — | US | AS53755 | 2026-08-25 | 2026-08-31 |
| 213.35.118.205 | 4322 | C2 | Unknown | — | — | SE | AS31898 | 2026-08-25 | 2026-08-31 |
| 185.242.3.249 | 7443 | C2 | HypeAgent | — | — | NL | AS401626 | 2026-08-25 | 2026-08-31 |
| 172.245.209.209 | 7443 | C2 | HypeAgent | — | — | US | AS36352 | 2026-08-25 | 2026-08-31 |
| 172.237.88.168 | 443 | C2 | PureRAT | — | — | US | AS63949 | 2026-08-25 | 2026-08-31 |
| 172.111.134.94 | 3001 | C2 | PureRAT | — | — | US | AS3223 | 2026-08-25 | 2026-08-31 |
| 157.20.182.22 | 1973 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-08-25 | 2026-08-31 |
| 147.124.212.136 | 7080 | C2 | HypeAgent | — | — | US | AS396073 | 2026-08-25 | 2026-08-31 |
| 104.239.66.99 | 56401 | C2 | PureRAT | — | — | GB | AS214961 | 2026-08-25 | 2026-08-31 |
| 104.143.204.239 | 52310 | C2 | Unknown | — | — | AE | AS26383 | 2026-08-25 | 2026-08-31 |
| 43.143.206.225 | 3307 | C2 | VShell | — | — | CN | AS45090 | 2026-08-25 | — |
| 208.167.245.124 | 9993 | C2 | VShell | — | — | US | AS20473 | 2026-08-25 | — |
| 149.88.66.234 | 3000 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-08-25 | — |
| 38.207.177.73 | 6666 | C2 | ValleyRAT | — | — | US | AS139659 | 2026-08-25 | — |
| 202.79.173.2 | 443 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-25 | — |