| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 195.186.4.217 | 2466 | C2 | Remcos | — | — | CH | AS3303 | 2026-08-06 | — |
| 36.140.162.173 | 11443 | C2 | Cobalt Strike | — | — | CN | AS9808 | 2026-08-06 | — |
| 141.98.10.179 | 8443 | C2 | PureLogs Stealer | — | — | LT | AS209605 | 2026-08-06 | — |
| 46.151.182.159 | 11200 | C2 | PureLogs Stealer | — | — | NL | AS205759 | 2026-08-06 | — |
| 194.33.35.80 | 443 | Payload | Unknown | — | — | SI | AS210644 | 2026-08-06 | — |
| 196.251.107.131 | 56003 | C2 | PureRAT | — | — | SC | AS214351 | 2026-08-06 | — |
| 196.251.107.131 | 56002 | C2 | PureRAT | — | — | SC | AS214351 | 2026-08-06 | — |
| 196.251.107.131 | 56001 | C2 | PureRAT | — | — | SC | AS214351 | 2026-08-06 | — |
| 87.58.197.40 | 56003 | C2 | PureRAT | — | — | NL | AS62164 | 2026-08-06 | — |
| 87.58.197.40 | 56002 | C2 | PureRAT | — | — | NL | AS62164 | 2026-08-06 | — |
| 87.58.197.40 | 56001 | C2 | PureRAT | — | — | NL | AS62164 | 2026-08-06 | — |
| 38.207.178.195 | 8001 | C2 | Aisuru | — | — | US | AS139659 | 2026-08-06 | 2026-08-12 |
| 78.17.93.55 | 10443 | C2 | Cobalt Strike | — | — | AE | AS26832 | 2026-08-06 | — |
| 167.172.188.177 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 146.56.195.201 | 4433 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-06 | — |
| 159.65.136.5 | 7647 | C2 | Remus | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 188.166.222.192 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 159.203.172.232 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 161.35.48.40 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 139.59.144.8 | 8001 | C2 | Aisuru | — | — | SG | AS14061 | 2026-08-06 | 2026-08-12 |
| 165.245.178.39 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-06 | 2026-08-12 |
| 38.207.178.195 | 8443 | C2 | Aisuru | — | — | US | AS139659 | 2026-08-06 | 2026-08-12 |
| 160.20.109.29 | 8080 | C2 | DCRat | — | — | TR | AS402492 | 2026-08-06 | — |
| 103.142.147.19 | 28554 | C2 | Unknown | — | — | HK | AS135581 | 2026-08-06 | — |
| 103.142.147.17 | 28554 | C2 | Unknown | — | — | HK | AS135581 | 2026-08-06 | — |
| 123.56.48.58 | 20000 | C2 | Unknown | — | — | CN | AS37963 | 2026-08-06 | — |
| 42.51.37.74 | 80 | C2 | VShell | — | — | CN | AS56005 | 2026-08-06 | — |
| 47.120.44.195 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-06 | — |
| 112.124.44.139 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-06 | — |
| 88.216.191.9 | 8880 | C2 | VShell | — | — | LT | AS216444 | 2026-08-06 | — |
| 60.247.206.23 | 801 | C2 | Cobalt Strike | — | — | CN | AS38283 | 2026-08-06 | — |
| 217.154.212.25 | 4444 | C2 | Cobalt Strike | — | — | DE | AS8560 | 2026-08-05 | 2026-08-12 |
| 100.82.195.65 | 4444 | C2 | Cobalt Strike | — | — | — | — | 2026-08-05 | 2026-08-12 |
| 185.103.164.42 | 8080 | C2 | AdaptixC2 | — | — | RU | AS200019 | 2026-08-05 | — |
| 185.103.164.42 | 80 | C2 | AdaptixC2 | — | — | RU | AS200019 | 2026-08-05 | — |
| 185.103.164.42 | 443 | C2 | AdaptixC2 | — | — | RU | AS200019 | 2026-08-05 | — |
| 207.57.134.202 | 8080 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-05 | — |
| 207.57.134.202 | 80 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-05 | — |
| 118.195.209.31 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-05 | — |
| 118.195.209.31 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-05 | — |
| 118.195.209.31 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-05 | — |
| 118.89.121.171 | 8080 | C2 | VShell | — | — | CN | AS45090 | 2026-08-05 | — |
| 8.145.52.37 | 5222 | C2 | VShell | — | — | SG | AS37963 | 2026-08-05 | — |
| 42.193.228.200 | 8080 | C2 | VShell | — | — | CN | AS45090 | 2026-08-05 | — |
| 89.116.220.116 | 3232 | C2 | Unknown | — | — | LT | AS46475 | 2026-08-05 | — |
| 111.170.148.141 | 8082 | C2 | Cobalt Strike | — | — | CN | AS151185 | 2026-08-05 | — |
| 31.77.195.32 | 8080 | C2 | AdaptixC2 | — | — | US | AS210546 | 2026-08-05 | — |
| 94.250.176.76 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-08-05 | 2026-08-12 |
| 86.48.16.94 | 30200 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-08-05 | 2026-08-12 |
| 85.209.87.84 | 443 | C2 | PureRAT | — | — | CA | AS64236 | 2026-08-05 | 2026-08-12 |