| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 93.152.223.39 | 5900 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 443 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | 2026-08-18 |
| 93.152.223.39 | 80 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 139.129.23.109 | 8085 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 72.56.52.200 | 9999 | C2 | Mirai | — | — | US | AS39900 | 2026-08-12 | 2026-08-12 |
| 139.129.23.109 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 121.89.169.8 | 8081 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 142.4.58.48 | 1224 | C2 | VShell | — | — | US | AS18450 | 2026-08-12 | — |
| 106.75.178.185 | 8084 | C2 | VShell | — | — | CN | AS58466 | 2026-08-12 | — |
| 180.76.105.117 | 8085 | C2 | VShell | — | — | CN | AS38365 | 2026-08-12 | — |
| 8.130.55.42 | 8888 | C2 | VShell | — | — | SG | AS37963 | 2026-08-12 | — |
| 159.75.123.199 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 159.75.123.199 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 159.75.123.199 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 176.149.202.136 | 8808 | C2 | AsyncRAT | — | — | FR | AS5410 | 2026-08-12 | — |
| 89.127.233.194 | 7443 | C2 | Unknown | — | — | IS | AS44925 | 2026-08-12 | 2026-08-18 |
| 159.75.123.199 | 1111 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-11 | 2026-08-18 |
| 114.67.98.107 | 54325 | C2 | Cobalt Strike | — | — | CN | AS4811 | 2026-08-11 | 2026-08-18 |
| 113.44.90.0 | 8787 | C2 | Unknown | — | — | CN | AS55990 | 2026-08-11 | — |
| 185.139.214.67 | 7443 | C2 | Unknown | — | — | RU | AS200019 | 2026-08-11 | 2026-08-18 |
| 158.94.208.101 | 8808 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-11 | — |
| 35.209.195.28 | 8080 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 188.49.80.159 | 443 | C2 | Havoc | — | — | SA | AS25019 | 2026-08-11 | 2026-08-18 |
| 35.209.195.28 | 22 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 35.209.195.28 | 443 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 35.209.195.28 | 80 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | 2026-08-13 |
| 43.225.157.17 | 22 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 8000 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 443 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 46.246.14.13 | 7044 | C2 | Vjw0rm | — | — | SE | AS42708 | 2026-08-11 | — |
| 43.225.157.17 | 888 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 8080 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 80 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 47.122.116.54 | 13676 | C2 | NjRAT | — | — | CN | AS37963 | 2026-08-11 | — |
| 91.92.243.36 | 56003 | C2 | PureRAT | — | — | TR | AS202412 | 2026-08-11 | 2026-08-18 |
| 89.37.100.205 | 56002 | C2 | PureRAT | — | — | SG | AS931 | 2026-08-11 | 2026-08-18 |
| 89.37.100.205 | 56001 | C2 | PureRAT | — | — | SG | AS931 | 2026-08-11 | 2026-08-18 |
| 87.76.146.221 | 7771 | C2 | AsyncRAT | — | — | UA | AS15924 | 2026-08-11 | 2026-08-18 |
| 85.137.249.185 | 25729 | C2 | AdaptixC2 | — | — | MD | AS200019 | 2026-08-11 | 2026-08-18 |
| 64.188.69.73 | 7273 | C2 | NetSupportManager RAT | — | — | US | AS213520 | 2026-08-11 | 2026-08-18 |
| 54.171.35.227 | 443 | C2 | Unknown | — | — | US | AS16509 | 2026-08-11 | 2026-08-18 |
| 45.88.91.103 | 2244 | C2 | AsyncRAT | — | — | BG | AS399486 | 2026-08-11 | 2026-08-18 |
| 220.154.140.4 | 9443 | C2 | Unknown | — | — | CN | AS146966 | 2026-08-11 | 2026-08-18 |
| 217.60.241.19 | 8808 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-08-11 | 2026-08-18 |
| 209.99.184.151 | 55005 | C2 | PureRAT | — | — | KN | AS402253 | 2026-08-11 | 2026-08-18 |
| 193.221.201.164 | 7443 | C2 | Unknown | — | — | RU | AS209946 | 2026-08-11 | 2026-08-18 |
| 182.16.29.37 | 443 | C2 | PureRAT | — | — | HK | AS45753 | 2026-08-11 | 2026-08-18 |
| 182.16.29.35 | 443 | C2 | PureRAT | — | — | HK | AS45753 | 2026-08-11 | 2026-08-18 |
| 18.171.60.199 | 9999 | C2 | AsyncRAT | — | — | US | AS16509 | 2026-08-11 | 2026-08-18 |
| 168.222.251.83 | 56011 | C2 | PureRAT | — | — | US | AS395092 | 2026-08-11 | 2026-08-18 |