| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 130.94.66.82 | 80 | C2 | VShell | — | — | US | AS154177 | 2026-08-14 | — |
| 169.58.31.140 | 443 | C2 | Unknown | — | — | DE | AS51167 | 2026-08-14 | 2026-08-20 |
| 124.222.109.22 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-14 | — |
| 120.26.210.31 | 8089 | C2 | VShell | — | — | CN | AS37963 | 2026-08-14 | — |
| 169.58.31.140 | 7443 | C2 | Unknown | — | — | DE | AS51167 | 2026-08-14 | 2026-08-20 |
| 198.44.177.253 | 8084 | C2 | VShell | — | — | US | AS154321 | 2026-08-14 | — |
| 192.140.174.170 | 4431 | C2 | VShell | — | — | CN | AS146817 | 2026-08-14 | — |
| 154.64.254.102 | 8084 | C2 | VShell | — | — | US | AS979 | 2026-08-14 | — |
| 60.185.66.75 | 8084 | C2 | VShell | — | — | CN | AS4134 | 2026-08-14 | — |
| 47.250.190.129 | 8084 | C2 | VShell | — | — | US | AS45102 | 2026-08-14 | — |
| 47.96.5.12 | 8000 | C2 | VShell | — | — | CN | AS37963 | 2026-08-14 | — |
| 145.223.93.74 | 7748 | C2 | Remus | — | — | US | AS47583 | 2026-08-14 | 2026-08-20 |
| 185.92.190.175 | 8896 | C2 | Cobalt Strike | — | — | US | AS7488 | 2026-08-13 | 2026-08-20 |
| 113.52.135.27 | 19666 | C2 | Cobalt Strike | — | — | HK | AS133380 | 2026-08-13 | 2026-08-20 |
| 62.171.169.111 | 5525 | C2 | Remus | — | — | DE | AS51167 | 2026-08-13 | — |
| 47.236.130.154 | 2095 | C2 | VShell | — | — | US | AS45102 | 2026-08-13 | — |
| 103.83.87.158 | 4040 | C2 | XWorm | — | — | TR | AS44382 | 2026-08-13 | — |
| 82.157.13.47 | 8899 | C2 | VShell | — | — | CN | AS45090 | 2026-08-13 | — |
| 85.208.69.45 | 443 | C2 | BianLian | — | — | FR | AS42275 | 2026-08-13 | 2026-08-20 |
| 64.89.161.181 | 56002 | C2 | PureRAT | — | — | US | AS205759 | 2026-08-13 | 2026-08-20 |
| 64.89.161.181 | 56001 | C2 | PureRAT | — | — | US | AS205759 | 2026-08-13 | 2026-08-20 |
| 63.141.237.101 | 8808 | C2 | AsyncRAT | — | — | US | AS33387 | 2026-08-13 | 2026-08-20 |
| 63.141.237.101 | 6606 | C2 | AsyncRAT | — | — | US | AS33387 | 2026-08-13 | 2026-08-20 |
| 46.246.4.16 | 7049 | C2 | AsyncRAT | — | — | SE | AS42708 | 2026-08-13 | 2026-08-20 |
| 45.88.91.74 | 7580 | C2 | AsyncRAT | — | — | BG | AS399486 | 2026-08-13 | 2026-08-20 |
| 217.60.241.247 | 6606 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-08-13 | 2026-08-20 |
| 217.60.195.226 | 56003 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-13 | 2026-08-20 |
| 216.118.235.69 | 4321 | C2 | AdaptixC2 | — | — | HK | AS45753 | 2026-08-13 | 2026-08-20 |
| 216.118.235.66 | 4321 | C2 | AdaptixC2 | — | — | HK | AS45753 | 2026-08-13 | 2026-08-20 |
| 177.22.117.81 | 9001 | C2 | DanaBot | — | — | BR | AS263331 | 2026-08-13 | 2026-08-20 |
| 172.86.72.75 | 7443 | C2 | Unknown | — | — | US | AS14956 | 2026-08-13 | 2026-08-20 |
| 147.45.61.65 | 56003 | C2 | PureRAT | — | — | RU | AS209207 | 2026-08-13 | 2026-08-20 |
| 128.90.112.237 | 6666 | C2 | DCRat | — | — | US | AS40861 | 2026-08-13 | 2026-08-20 |
| 128.90.105.154 | 8624 | C2 | DCRat | — | — | US | AS40861 | 2026-08-13 | 2026-08-20 |
| 108.187.43.144 | 56002 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-13 | 2026-08-20 |
| 108.187.43.144 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-13 | 2026-08-20 |
| 108.187.43.137 | 56002 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-13 | 2026-08-20 |
| 108.187.43.137 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-13 | 2026-08-20 |
| 104.251.180.164 | 55006 | C2 | PureRAT | — | — | KN | AS402253 | 2026-08-13 | 2026-08-20 |
| 104.239.66.245 | 56003 | C2 | PureRAT | — | — | GB | AS214961 | 2026-08-13 | 2026-08-20 |
| 102.117.162.167 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-08-13 | 2026-08-20 |
| 183.60.226.2 | 33333 | C2 | Unknown | — | — | CN | AS134763 | 2026-08-13 | — |
| 134.122.200.208 | 8088 | C2 | Quasar RAT | — | — | SG | AS152194 | 2026-08-13 | — |
| 68.64.182.169 | 465 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 110 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 45.77.75.145 | 3000 | C2 | Unknown | — | — | US | AS20473 | 2026-08-13 | — |
| 79.133.42.25 | 8888 | C2 | Unknown | — | — | DE | AS214036 | 2026-08-13 | — |
| 38.76.165.176 | 5000 | C2 | Unknown | — | — | US | AS401701 | 2026-08-13 | — |
| 178.16.55.227 | 9000 | C2 | Unknown | — | — | TR | AS202412 | 2026-08-13 | — |
| 101.42.255.92 | 8443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |