| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 177.22.118.236 | 9001 | C2 | DanaBot | — | — | BR | AS263331 | 2026-08-12 | 2026-08-18 |
| 175.43.223.196 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-08-12 | 2026-08-18 |
| 172.245.23.153 | 56003 | C2 | PureRAT | — | — | US | AS36352 | 2026-08-12 | 2026-08-18 |
| 172.245.23.153 | 56002 | C2 | PureRAT | — | — | US | AS36352 | 2026-08-12 | 2026-08-18 |
| 172.245.23.153 | 56001 | C2 | PureRAT | — | — | US | AS36352 | 2026-08-12 | 2026-08-18 |
| 158.94.208.101 | 963 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-12 | 2026-08-18 |
| 158.94.208.101 | 777 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-12 | 2026-08-18 |
| 158.94.208.101 | 7707 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-12 | 2026-08-18 |
| 13.236.153.60 | 443 | C2 | PoshC2 | — | — | US | AS16509 | 2026-08-12 | 2026-08-18 |
| 128.90.105.228 | 6666 | C2 | DCRat | — | — | US | AS40861 | 2026-08-12 | 2026-08-18 |
| 107.22.41.214 | 7443 | C2 | Unknown | — | — | US | AS14618 | 2026-08-12 | 2026-08-18 |
| 107.172.72.178 | 54398 | C2 | Sliver | — | — | US | AS36352 | 2026-08-12 | 2026-08-18 |
| 107.172.72.178 | 31337 | C2 | Sliver | — | — | US | AS36352 | 2026-08-12 | 2026-08-18 |
| 104.243.248.63 | 410 | C2 | AsyncRAT | — | — | US | AS3223 | 2026-08-12 | 2026-08-18 |
| 103.146.231.107 | 4321 | C2 | AdaptixC2 | — | — | HK | AS401696 | 2026-08-12 | 2026-08-18 |
| 103.140.154.7 | 32333 | C2 | AdaptixC2 | — | — | HK | AS153656 | 2026-08-12 | 2026-08-18 |
| 198.211.96.18 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-12 | 2026-08-18 |
| 68.183.221.133 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-12 | 2026-08-18 |
| 162.243.240.81 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-12 | 2026-08-18 |
| 89.19.223.68 | 8443 | C2 | Aisuru | — | — | RU | AS202799 | 2026-08-12 | 2026-08-18 |
| 165.22.81.15 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-12 | 2026-08-18 |
| 169.58.121.189 | 80 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-12 | — |
| 169.58.121.189 | 443 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-12 | — |
| 113.44.90.0 | 8788 | C2 | Unknown | — | — | CN | AS55990 | 2026-08-12 | — |
| 45.148.18.44 | 53522 | C2 | Remcos | — | — | SE | AS42675 | 2026-08-12 | — |
| 217.60.195.187 | 7075 | C2 | Mirai | — | — | AE | AS209373 | 2026-08-12 | — |
| 151.241.154.218 | 2021 | C2 | XWorm | — | — | AE | AS399486 | 2026-08-12 | — |
| 104.249.10.187 | 7004 | C2 | XWorm | — | — | GB | AS214961 | 2026-08-12 | — |
| 2.27.62.172 | 8443 | C2 | PureLogs Stealer | — | — | US | AS200051 | 2026-08-12 | — |
| 107.174.20.215 | 8824 | C2 | XWorm | — | — | US | AS20278 | 2026-08-12 | — |
| 217.60.195.74 | 443 | C2 | XWorm | — | — | AE | AS209373 | 2026-08-12 | — |
| 213.152.161.91 | 8707 | C2 | AsyncRAT | — | — | NL | AS49453 | 2026-08-12 | — |
| 43.128.130.45 | 56502 | C2 | VShell | — | — | SG | AS132203 | 2026-08-12 | — |
| 156.248.73.84 | 8081 | C2 | VShell | — | — | SC | AS399077 | 2026-08-12 | — |
| 156.248.73.84 | 80 | C2 | VShell | — | — | SC | AS399077 | 2026-08-12 | — |
| 68.65.123.172 | 21 | C2 | Agent Tesla | — | — | US | AS22612 | 2026-08-12 | — |
| 207.180.58.21 | 7000 | C2 | Unknown | — | — | US | AS213250 | 2026-08-12 | — |
| 186.169.76.60 | 5047 | C2 | Unknown RAT | — | — | CO | AS3816 | 2026-08-12 | — |
| 169.58.121.189 | 4443 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-12 | 2026-08-18 |
| 134.199.153.107 | 443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-12 | — |
| 217.144.187.85 | 3334 | C2 | SnappyClient | — | — | AM | AS210644 | 2026-08-12 | — |
| 43.225.157.17 | 3970 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-12 | — |
| 43.225.157.17 | 3000 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-12 | — |
| 95.85.237.226 | 53535 | C2 | XMRIG | — | — | CZ | AS200823 | 2026-08-12 | — |
| 140.82.46.246 | 7443 | C2 | Unknown | — | — | US | AS20473 | 2026-08-12 | 2026-08-18 |
| 93.152.223.39 | 9090 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 8080 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 22 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 152.32.240.167 | 9556 | Payload | Unidentified Linux 001 | — | — | HK | AS135377 | 2026-08-12 | — |
| 46.246.14.7 | 7044 | C2 | Vjw0rm | — | — | SE | AS42708 | 2026-08-12 | — |