| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 101.36.123.12 | 443 | C2 | AdaptixC2 | — | — | HK | AS135377 | 2026-08-05 | — |
| 101.36.123.12 | 8080 | C2 | AdaptixC2 | — | — | HK | AS135377 | 2026-08-05 | — |
| 38.55.145.42 | 8888 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 8317 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 7000 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 8080 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 8081 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 80 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | 2026-08-06 |
| 38.55.145.42 | 443 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 38.55.145.42 | 22 | C2 | Cobalt Strike | — | — | US | AS400619 | 2026-08-05 | — |
| 210.56.48.227 | 8081 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-05 | — |
| 210.56.48.227 | 888 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-05 | — |
| 210.56.48.227 | 8080 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-05 | — |
| 210.56.48.227 | 443 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-05 | — |
| 210.56.48.227 | 22 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-05 | — |
| 106.75.249.202 | 9001 | C2 | Cobalt Strike | — | — | CN | AS17621 | 2026-08-05 | — |
| 106.75.249.202 | 111 | C2 | Cobalt Strike | — | — | CN | AS17621 | 2026-08-05 | — |
| 101.42.255.92 | 8555 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-05 | — |
| 106.75.249.202 | 22 | C2 | Cobalt Strike | — | — | CN | AS17621 | 2026-08-05 | — |
| 195.177.94.210 | 80 | C2 | AsyncRAT | — | — | UA | AS214961 | 2026-08-05 | — |
| 222.255.215.42 | 30005 | C2 | Cobalt Strike | — | — | VN | AS45899 | 2026-08-04 | 2026-08-11 |
| 210.56.48.227 | 80 | C2 | Cobalt Strike | — | — | HK | AS152194 | 2026-08-04 | 2026-08-11 |
| 114.132.46.254 | 8443 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-04 | — |
| 117.72.202.93 | 80 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-04 | — |
| 117.72.202.93 | 22 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-04 | — |
| 117.72.202.93 | 8888 | C2 | Unknown | — | — | CN | AS141679 | 2026-08-04 | — |
| 47.86.2.244 | 558 | C2 | ValleyRAT | — | — | US | AS45102 | 2026-08-04 | — |
| 118.107.9.185 | 1112 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-04 | — |
| 47.86.2.244 | 557 | C2 | ValleyRAT | — | — | US | AS45102 | 2026-08-04 | — |
| 118.107.43.220 | 8080 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-04 | — |
| 172.245.209.149 | 2414 | C2 | Remcos | — | — | US | AS36352 | 2026-08-04 | — |
| 172.94.9.104 | 8080 | C2 | DCRat | — | — | US | AS213790 | 2026-08-04 | — |
| 165.154.244.107 | 8084 | C2 | VShell | — | — | SG | AS142002 | 2026-08-04 | — |
| 130.94.66.43 | 19999 | C2 | VShell | — | — | US | AS154177 | 2026-08-04 | — |
| 103.251.113.127 | 8084 | C2 | VShell | — | — | HK | AS133380 | 2026-08-04 | — |
| 43.138.135.175 | 18443 | C2 | VShell | — | — | CN | AS45090 | 2026-08-04 | — |
| 38.55.105.238 | 8084 | C2 | VShell | — | — | US | AS967 | 2026-08-04 | — |
| 93.82.26.41 | 8000 | C2 | Eye Pyramid | — | — | AT | AS8447 | 2026-08-04 | 2026-08-11 |
| 80.96.109.107 | 443 | C2 | PureRAT | — | — | RO | AS48753 | 2026-08-04 | 2026-08-11 |
| 43.134.169.103 | 8080 | C2 | Havoc | — | — | SG | AS132203 | 2026-08-04 | 2026-08-11 |
| 35.202.238.13 | 8443 | C2 | Evilginx | — | — | US | AS396982 | 2026-08-04 | 2026-08-11 |
| 31.76.96.193 | 80 | C2 | Tsundere | — | — | US | AS206134 | 2026-08-04 | 2026-08-11 |
| 3.122.223.106 | 80 | C2 | Unknown | — | — | US | AS16509 | 2026-08-04 | 2026-08-11 |
| 207.189.25.132 | 443 | C2 | PureRAT | — | — | SG | AS399114 | 2026-08-04 | 2026-08-11 |
| 203.98.68.17 | 30200 | C2 | AsyncRAT | — | — | IN | AS215117 | 2026-08-04 | 2026-08-11 |
| 195.177.94.71 | 56001 | C2 | PureRAT | — | — | UA | AS214961 | 2026-08-04 | 2026-08-11 |
| 176.97.114.8 | 56002 | C2 | PureRAT | — | — | UA | AS6698 | 2026-08-04 | 2026-08-11 |
| 176.97.114.8 | 56001 | C2 | PureRAT | — | — | UA | AS6698 | 2026-08-04 | 2026-08-11 |
| 172.182.216.158 | 443 | C2 | Unknown | — | — | GB | AS8075 | 2026-08-04 | 2026-08-11 |
| 161.97.154.193 | 56002 | C2 | PureRAT | — | — | DE | AS51167 | 2026-08-04 | 2026-08-11 |