| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 165.22.81.15 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-17 | 2026-08-18 |
| 103.217.186.180 | 55554 | C2 | Cobalt Strike | — | — | CN | AS146817 | 2026-08-17 | — |
| 157.245.194.180 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-17 | — |
| 157.245.194.180 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-17 | 2026-08-17 |
| 168.144.30.198 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-17 | 2026-08-17 |
| 157.230.84.95 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-17 | — |
| 103.140.154.201 | 7800 | C2 | ValleyRAT | — | — | HK | AS153656 | 2026-08-17 | — |
| 103.140.154.201 | 7811 | C2 | ValleyRAT | — | — | HK | AS153656 | 2026-08-17 | — |
| 118.107.0.196 | 7800 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-17 | — |
| 118.107.0.196 | 7811 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-17 | — |
| 156.251.16.29 | 7800 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-17 | — |
| 156.251.16.29 | 7811 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-17 | — |
| 202.162.99.165 | 441 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-17 | — |
| 102.117.164.62 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-08-17 | — |
| 47.93.42.22 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-17 | — |
| 111.170.148.132 | 8081 | C2 | Unknown | — | — | CN | AS151185 | 2026-08-17 | — |
| 111.170.148.132 | 22 | C2 | Unknown | — | — | CN | AS151185 | 2026-08-17 | — |
| 120.79.192.53 | 111 | C2 | Unknown | — | — | CN | AS37963 | 2026-08-17 | — |
| 120.79.192.53 | 22 | C2 | Unknown | — | — | CN | AS37963 | 2026-08-17 | — |
| 186.241.79.63 | 11268 | C2 | VShell | — | — | US | AS400619 | 2026-08-17 | — |
| 139.196.238.43 | 8443 | C2 | VShell | — | — | CN | AS37963 | 2026-08-17 | — |
| 101.34.235.48 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-17 | — |
| 101.34.235.48 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-17 | — |
| 60.185.66.128 | 8084 | C2 | VShell | — | — | CN | AS4134 | 2026-08-17 | — |
| 38.190.196.19 | 80 | C2 | Cobalt Strike | — | — | US | AS133199 | 2026-08-17 | — |
| 38.190.196.19 | 443 | C2 | Cobalt Strike | — | — | US | AS133199 | 2026-08-17 | — |
| 154.91.85.44 | 8080 | C2 | Cobalt Strike | — | — | SC | AS399077 | 2026-08-17 | — |
| 154.91.85.44 | 80 | C2 | Cobalt Strike | — | — | SC | AS399077 | 2026-08-17 | — |
| 38.190.196.19 | 8080 | C2 | Cobalt Strike | — | — | US | AS133199 | 2026-08-16 | 2026-08-19 |
| 23.148.212.86 | 443 | C2 | Cobalt Strike | — | — | US | AS62468 | 2026-08-16 | 2026-08-19 |
| 154.91.85.44 | 443 | C2 | Cobalt Strike | — | — | SC | AS399077 | 2026-08-16 | 2026-08-19 |
| 43.143.118.200 | 5003 | C2 | Unknown | — | — | CN | AS45090 | 2026-08-16 | — |
| 2.27.4.236 | 5552 | C2 | AsyncRAT | — | — | US | AS210457 | 2026-08-16 | 2026-08-19 |
| 67.216.197.83 | 5080 | C2 | Unknown | — | — | CA | AS25820 | 2026-08-16 | — |
| 94.26.0.7 | 80 | C2 | Tsundere | — | — | BG | AS135388 | 2026-08-16 | 2026-08-19 |
| 94.250.182.47 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-08-16 | 2026-08-19 |
| 85.120.217.247 | 7443 | C2 | Unknown | — | — | RO | AS200019 | 2026-08-16 | 2026-08-19 |
| 68.183.248.32 | 4443 | C2 | Havoc | — | — | US | AS14061 | 2026-08-16 | 2026-08-19 |
| 51.79.169.74 | 443 | C2 | PureRAT | — | — | CA | AS16276 | 2026-08-16 | 2026-08-19 |
| 45.145.41.185 | 56003 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-16 | 2026-08-19 |
| 45.145.41.185 | 56002 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-16 | 2026-08-19 |
| 217.60.195.110 | 56003 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-16 | 2026-08-19 |
| 195.177.94.41 | 56002 | C2 | PureRAT | — | — | UA | AS214961 | 2026-08-16 | 2026-08-19 |
| 187.154.215.53 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-08-16 | 2026-08-19 |
| 178.172.173.84 | 3333 | C2 | Evilginx | — | — | BY | AS6697 | 2026-08-16 | 2026-08-19 |
| 172.94.18.103 | 77 | C2 | AsyncRAT | — | — | US | AS9009 | 2026-08-16 | 2026-08-19 |
| 153.52.182.78 | 7777 | C2 | AsyncRAT | — | — | SG | AS399114 | 2026-08-16 | 2026-08-19 |
| 148.163.101.169 | 443 | C2 | PureRAT | — | — | US | AS53755 | 2026-08-16 | 2026-08-19 |
| 124.198.131.110 | 443 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-16 | 2026-08-19 |
| 109.248.160.184 | 443 | C2 | Havoc | — | — | CZ | AS56971 | 2026-08-16 | 2026-08-19 |