| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 154.40.62.125 | 443 | C2 | pupy | — | — | US | AS147003 | 2026-08-11 | 2026-08-18 |
| 153.80.249.203 | 56003 | C2 | PureRAT | — | — | RU | AS209207 | 2026-08-11 | 2026-08-18 |
| 130.12.182.39 | 5444 | C2 | AsyncRAT | — | — | US | AS197769 | 2026-08-11 | 2026-08-18 |
| 124.198.131.169 | 56003 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-11 | 2026-08-18 |
| 124.198.131.169 | 56002 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-11 | 2026-08-18 |
| 124.198.131.169 | 56001 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-11 | 2026-08-18 |
| 95.179.151.97 | 3333 | C2 | SnappyClient | — | — | US | AS20473 | 2026-08-11 | — |
| 217.144.187.85 | 3333 | C2 | SnappyClient | — | — | AM | AS210644 | 2026-08-11 | — |
| 43.225.157.17 | 8009 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 192.252.179.24 | 22 | C2 | Cobalt Strike | — | — | US | AS152194 | 2026-08-11 | — |
| 178.128.80.204 | 8080 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-11 | — |
| 178.128.80.204 | 443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-11 | — |
| 178.128.80.204 | 80 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-11 | 2026-08-18 |
| 176.65.139.244 | 1337 | C2 | Mirai | — | — | DE | AS219502 | 2026-08-11 | — |
| 47.94.224.229 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-11 | — |
| 146.56.227.227 | 9443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-11 | 2026-08-17 |
| 93.171.14.7 | 80 | C2 | XMRIG | — | — | CZ | AS51812 | 2026-08-11 | — |
| 103.27.78.14 | 8033 | C2 | Mirai | — | — | AU | AS979 | 2026-08-11 | — |
| 217.217.243.76 | 8033 | C2 | Mirai | — | — | DE | AS214677 | 2026-08-11 | — |
| 62.84.172.106 | 8033 | C2 | Mirai | — | — | DE | AS214677 | 2026-08-11 | — |
| 72.62.195.74 | 2536 | C2 | Remus | — | — | LT | AS47583 | 2026-08-11 | 2026-08-12 |
| 47.94.224.229 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-11 | — |
| 47.94.224.229 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-11 | — |
| 65.109.97.220 | 8084 | C2 | VShell | — | — | DE | AS24940 | 2026-08-11 | — |
| 47.254.73.23 | 18789 | C2 | Unknown | — | — | US | AS45102 | 2026-08-11 | — |
| 43.254.166.41 | 8082 | C2 | Cobalt Strike | — | — | HK | AS42960 | 2026-08-11 | — |
| 192.252.185.78 | 22 | C2 | Cobalt Strike | — | — | US | AS152194 | 2026-08-11 | — |
| 54.91.223.28 | 41667 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.91.223.28 | 1065 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.91.129.132 | 41694 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.91.129.132 | 5074 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.91.129.132 | 4403 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.80.154.193 | 19941 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 54.80.154.193 | 6490 | C2 | Grandoreiro | — | — | US | AS14618 | 2026-08-11 | — |
| 176.65.139.236 | 1337 | C2 | Mirai | — | — | DE | AS219502 | 2026-08-11 | — |
| 8.222.247.229 | 60132 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.222.179.91 | 60122 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.85.120 | 60142 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.69.227 | 60133 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.62.229 | 60143 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.241.116 | 60106 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.210.218 | 60139 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.169.170 | 60119 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 8.219.155.47 | 60149 | Payload | P2Pinfect | — | — | SG | AS45102 | 2026-08-11 | — |
| 64.226.68.236 | 60128 | Payload | P2Pinfect | — | — | US | AS14061 | 2026-08-11 | — |
| 49.235.101.101 | 60147 | Payload | P2Pinfect | — | — | CN | AS45090 | 2026-08-11 | — |
| 47.245.84.42 | 60116 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.245.111.51 | 60121 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.237.167.249 | 60128 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.237.127.21 | 60124 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |