| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 119.29.122.42 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 119.29.122.42 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 68.64.182.169 | 3306 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 202.181.188.64 | 1488 | C2 | Quasar RAT | — | — | PL | AS216129 | 2026-08-13 | — |
| 68.64.182.169 | 8010 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 5727 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 111 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 443 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 38.240.32.5 | 54984 | C2 | Nanocore RAT | — | — | US | AS931 | 2026-08-13 | — |
| 91.242.163.227 | 5174 | C2 | AsyncRAT | — | — | SK | AS61335 | 2026-08-13 | 2026-08-19 |
| 86.124.168.48 | 443 | C2 | FAKEUPDATES | — | — | RO | AS8708 | 2026-08-13 | 2026-08-19 |
| 54.54.27.128 | 443 | C2 | Unknown | — | — | US | AS16509 | 2026-08-13 | 2026-08-19 |
| 38.240.57.198 | 443 | C2 | PureRAT | — | — | US | AS931 | 2026-08-13 | 2026-08-19 |
| 217.60.241.247 | 7722 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-08-13 | 2026-08-19 |
| 8.210.155.34 | 6868 | C2 | ValleyRAT | — | — | SG | AS45102 | 2026-08-13 | — |
| 203.161.55.41 | 7691 | C2 | AdaptixC2 | — | — | US | AS22612 | 2026-08-13 | 2026-08-19 |
| 202.73.4.82 | 44321 | C2 | AdaptixC2 | — | — | BD | AS134677 | 2026-08-13 | 2026-08-19 |
| 194.76.226.90 | 4321 | C2 | AdaptixC2 | — | — | DE | AS39378 | 2026-08-13 | 2026-08-19 |
| 193.138.195.29 | 56003 | C2 | PureRAT | — | — | GB | AS201579 | 2026-08-13 | 2026-08-19 |
| 193.138.195.29 | 56002 | C2 | PureRAT | — | — | GB | AS201579 | 2026-08-13 | 2026-08-19 |
| 193.138.195.29 | 56001 | C2 | PureRAT | — | — | GB | AS201579 | 2026-08-13 | 2026-08-19 |
| 185.34.147.35 | 8080 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-08-13 | 2026-08-19 |
| 185.34.147.34 | 8080 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-08-13 | 2026-08-19 |
| 185.34.147.32 | 8080 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-08-13 | 2026-08-19 |
| 185.34.147.31 | 8080 | C2 | AsyncRAT | — | — | US | AS7488 | 2026-08-13 | 2026-08-19 |
| 185.199.197.93 | 7443 | C2 | Unknown | — | — | GB | AS212171 | 2026-08-13 | 2026-08-19 |
| 172.111.134.94 | 56013 | C2 | PureRAT | — | — | US | AS3223 | 2026-08-13 | 2026-08-19 |
| 154.36.188.233 | 8080 | C2 | Havoc | — | — | US | AS979 | 2026-08-13 | 2026-08-19 |
| 139.180.136.200 | 7443 | C2 | Unknown | — | — | US | AS20473 | 2026-08-13 | 2026-08-19 |
| 130.12.182.39 | 2500 | C2 | AsyncRAT | — | — | US | AS197769 | 2026-08-13 | 2026-08-19 |
| 103.54.153.49 | 443 | C2 | PureRAT | — | — | SG | AS136557 | 2026-08-13 | 2026-08-19 |
| 103.182.16.169 | 443 | C2 | DCRat | — | — | VN | AS140815 | 2026-08-13 | 2026-08-19 |
| 118.107.9.161 | 1112 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-13 | — |
| 68.64.182.169 | 8080 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 192.25.102.246 | 8088 | C2 | VShell | — | — | US | AS8796 | 2026-08-13 | — |
| 159.75.123.199 | 21 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 118.107.9.161 | 1113 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-13 | — |
| 216.250.249.188 | 62520 | C2 | PureLogs Stealer | — | — | US | AS396073 | 2026-08-13 | — |
| 27.124.38.42 | 8383 | C2 | Unidentified VBS 001 | — | — | SG | AS152194 | 2026-08-13 | — |
| 134.122.136.2 | 8383 | C2 | Unidentified VBS 001 | — | — | SG | AS152194 | 2026-08-13 | — |
| 68.64.183.127 | 8090 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.183.127 | 5555 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 139.196.217.227 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-13 | — |
| 45.130.147.57 | 8085 | C2 | VShell | — | — | AE | AS49392 | 2026-08-13 | — |
| 40.160.232.46 | 4429 | C2 | DCRat | — | — | US | AS16276 | 2026-08-13 | — |
| 159.75.123.199 | 5003 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 139.196.231.194 | 80 | C2 | Unknown | — | — | CN | AS37963 | 2026-08-13 | — |
| 103.30.7.55 | 8477 | C2 | ValleyRAT | — | — | HK | AS135357 | 2026-08-13 | — |
| 156.239.47.245 | 8080 | C2 | Cobalt Strike | — | — | SC | AS400619 | 2026-08-13 | — |
| 156.239.47.245 | 80 | C2 | Cobalt Strike | — | — | SC | AS400619 | 2026-08-13 | — |