| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 47.237.124.1 | 60108 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.70.102 | 60108 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.28.220 | 60115 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.180.235 | 60136 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.172.100 | 60117 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.146.147 | 60134 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 47.236.122.72 | 60123 | Payload | P2Pinfect | — | — | US | AS45102 | 2026-08-11 | — |
| 222.213.23.56 | 60134 | Payload | P2Pinfect | — | — | CN | AS139220 | 2026-08-11 | — |
| 18.175.166.211 | 60101 | Payload | P2Pinfect | — | — | US | AS16509 | 2026-08-11 | — |
| 114.67.87.14 | 60125 | Payload | P2Pinfect | — | — | CN | AS4811 | 2026-08-11 | — |
| 106.13.23.149 | 6819 | Payload | P2Pinfect | — | — | CN | AS38365 | 2026-08-11 | — |
| 47.94.224.229 | 1111 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-11 | 2026-08-17 |
| 36.140.162.173 | 6666 | C2 | Cobalt Strike | — | — | CN | AS9808 | 2026-08-11 | 2026-08-17 |
| 87.120.104.144 | 7443 | C2 | PureLogs Stealer | — | — | BG | AS211443 | 2026-08-11 | — |
| 94.154.43.97 | 4330 | C2 | Mirai | — | — | UA | AS219502 | 2026-08-11 | — |
| 94.154.43.97 | 1302 | C2 | Mirai | — | — | UA | AS219502 | 2026-08-11 | — |
| 181.214.136.12 | 404 | C2 | Mirai | — | — | AE | AS212238 | 2026-08-11 | — |
| 94.154.43.97 | 44321 | C2 | Mirai | — | — | UA | AS219502 | 2026-08-11 | — |
| 213.199.55.80 | 9090 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-11 | — |
| 213.199.55.80 | 22 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-11 | — |
| 213.199.55.80 | 8080 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-11 | — |
| 106.75.139.193 | 80 | C2 | Cobalt Strike | — | — | CN | AS58466 | 2026-08-11 | — |
| 94.198.96.165 | 62769 | C2 | Unknown RAT | — | — | IT | AS49367 | 2026-08-11 | — |
| 31.56.209.60 | 443 | C2 | XWorm | — | — | AE | AS209373 | 2026-08-11 | — |
| 213.199.55.80 | 443 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-11 | — |
| 213.199.55.80 | 80 | C2 | Cobalt Strike | — | — | DE | AS51167 | 2026-08-11 | 2026-08-17 |
| 192.252.185.78 | 65530 | C2 | Cobalt Strike | — | — | US | AS152194 | 2026-08-11 | — |
| 106.75.139.193 | 22 | C2 | Cobalt Strike | — | — | CN | AS58466 | 2026-08-11 | — |
| 23.251.34.31 | 5555 | C2 | Bashlite | — | — | US | AS62468 | 2026-08-11 | — |
| 109.168.160.73 | 25565 | C2 | Unknown | — | — | RU | AS12683 | 2026-08-11 | — |
| 98.156.49.133 | 2021 | C2 | DCRat | — | — | US | AS11427 | 2026-08-11 | 2026-08-17 |
| 57.181.120.61 | 80 | C2 | Brute Ratel C4 | — | — | US | AS16509 | 2026-08-11 | 2026-08-17 |
| 54.54.33.23 | 443 | C2 | Unknown | — | — | US | AS16509 | 2026-08-11 | 2026-08-17 |
| 23.94.252.16 | 80 | C2 | Tsundere | — | — | US | AS207043 | 2026-08-11 | 2026-08-17 |
| 192.229.115.162 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 192.229.115.156 | 56003 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 192.229.115.156 | 56002 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 192.229.115.156 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 192.229.115.154 | 56003 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 192.229.115.154 | 56001 | C2 | PureRAT | — | — | US | AS138995 | 2026-08-11 | 2026-08-17 |
| 185.174.101.235 | 443 | C2 | PureRAT | — | — | UA | AS36352 | 2026-08-11 | 2026-08-17 |
| 178.16.52.136 | 7707 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-11 | 2026-08-17 |
| 128.90.102.72 | 8888 | C2 | DCRat | — | — | US | AS40861 | 2026-08-11 | 2026-08-17 |
| 104.251.181.111 | 3333 | C2 | DCRat | — | — | KN | AS402253 | 2026-08-11 | 2026-08-17 |
| 104.243.248.63 | 300 | C2 | AsyncRAT | — | — | US | AS3223 | 2026-08-11 | 2026-08-17 |
| 132.243.225.173 | 7080 | C2 | Unknown | — | — | CY | AS213702 | 2026-08-11 | — |
| 106.75.139.193 | 8080 | C2 | Cobalt Strike | — | — | CN | AS58466 | 2026-08-11 | — |
| 106.75.139.193 | 443 | C2 | Cobalt Strike | — | — | CN | AS58466 | 2026-08-11 | 2026-08-12 |
| 195.250.27.46 | 21 | C2 | Agent Tesla | — | — | GB | AS211126 | 2026-08-11 | — |
| 91.92.242.32 | 7407 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-11 | — |