| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 182.255.91.104 | 2095 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-08-23 | — |
| 182.255.91.104 | 8080 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-08-23 | — |
| 162.251.92.64 | 22 | C2 | Cobalt Strike | — | — | US | AS154321 | 2026-08-23 | — |
| 119.45.225.53 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-23 | — |
| 119.45.225.53 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-23 | — |
| 182.255.91.104 | 80 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-08-23 | 2026-08-29 |
| 119.45.225.53 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-23 | — |
| 119.45.225.53 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-23 | — |
| 182.255.91.104 | 443 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-08-23 | — |
| 182.255.91.104 | 2096 | C2 | Cobalt Strike | — | — | AU | AS35916 | 2026-08-23 | — |
| 159.203.69.210 | 48203 | C2 | AsyncRAT | — | — | US | AS14061 | 2026-08-23 | — |
| 154.198.49.31 | 7443 | C2 | Unknown | — | — | SC | AS138995 | 2026-08-23 | — |
| 130.12.182.39 | 2600 | C2 | AsyncRAT | — | — | US | AS197769 | 2026-08-23 | 2026-08-29 |
| 89.144.53.144 | 7443 | C2 | Unknown | — | — | DE | AS214902 | 2026-08-23 | 2026-08-29 |
| 118.190.217.226 | 18084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-23 | — |
| 111.230.241.141 | 18084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-23 | — |
| 107.151.233.120 | 8084 | C2 | VShell | — | — | US | AS62468 | 2026-08-23 | 2026-08-25 |
| 204.12.245.170 | 31337 | C2 | Sliver | — | — | US | AS32097 | 2026-08-23 | — |
| 18.139.162.58 | 31337 | C2 | Sliver | — | — | US | AS16509 | 2026-08-23 | — |
| 159.223.91.85 | 31337 | C2 | Sliver | — | — | US | AS14061 | 2026-08-23 | — |
| 38.92.47.25 | 4782 | C2 | Quasar RAT | — | — | US | AS397423 | 2026-08-23 | — |
| 189.150.86.165 | 1604 | C2 | DarkComet | — | — | MX | AS8151 | 2026-08-23 | — |
| 47.93.159.68 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-23 | — |
| 27.124.18.7 | 9999 | C2 | VShell | — | — | SG | AS152194 | 2026-08-23 | — |
| 111.170.148.132 | 5080 | C2 | Unknown | — | — | CN | AS151185 | 2026-08-23 | — |
| 45.8.46.122 | 8888 | C2 | Unknown | — | — | RO | AS49468 | 2026-08-23 | — |
| 38.76.183.197 | 60000 | C2 | Unknown | — | — | US | AS401701 | 2026-08-23 | — |
| 106.54.41.209 | 81 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-23 | — |
| 45.8.46.122 | 5432 | C2 | Unknown | — | — | RO | AS49468 | 2026-08-23 | — |
| 45.8.46.122 | 22 | C2 | Unknown | — | — | RO | AS49468 | 2026-08-23 | — |
| 101.42.96.140 | 9999 | C2 | VShell | — | — | CN | AS45090 | 2026-08-23 | — |
| 101.200.193.211 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-23 | — |
| 43.136.99.254 | 10001 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-23 | — |
| 152.136.43.50 | 8001 | C2 | VShell | — | — | CN | AS45090 | 2026-08-23 | — |
| 27.124.18.6 | 9999 | C2 | VShell | — | — | SG | AS152194 | 2026-08-23 | — |
| 167.71.217.41 | 7242 | C2 | Remus | — | — | US | AS14061 | 2026-08-23 | 2026-08-29 |
| 41.234.45.136 | 8808 | C2 | AsyncRAT | — | — | EG | AS8452 | 2026-08-22 | — |
| 80.190.77.86 | 222 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-08-22 | — |
| 80.190.77.86 | 9909 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-08-22 | — |
| 35.73.165.146 | 80 | C2 | Brute Ratel C4 | — | — | US | AS16509 | 2026-08-22 | 2026-08-29 |
| 195.177.94.217 | 7443 | C2 | HypeAgent | — | — | UA | AS214961 | 2026-08-22 | 2026-08-29 |
| 195.177.94.193 | 7443 | C2 | HypeAgent | — | — | UA | AS214961 | 2026-08-22 | 2026-08-29 |
| 35.198.202.239 | 8080 | C2 | VShell | — | — | US | AS396982 | 2026-08-22 | — |
| 201.79.5.223 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-22 | 2026-08-23 |
| 192.253.248.181 | 80 | Payload | Unknown Stealer | — | — | US | AS213790 | 2026-08-22 | — |
| 86.54.25.213 | 80 | Payload | Unknown Stealer | — | — | LV | AS210006 | 2026-08-22 | — |
| 5.181.2.220 | 23789 | C2 | Unknown | — | — | RU | AS215540 | 2026-08-22 | 2026-08-25 |
| 77.239.124.123 | 1234 | C2 | Mirai | — | — | US | AS198364 | 2026-08-22 | — |
| 43.143.14.43 | 8443 | C2 | VShell | — | — | CN | AS45090 | 2026-08-22 | — |
| 106.54.41.209 | 21116 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-22 | — |