| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 47.116.219.137 | 1234 | C2 | VShell | — | — | CN | AS37963 | 2026-07-26 | — |
| 42.192.214.157 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-26 | — |
| 23.95.14.48 | 60001 | C2 | VShell | — | — | US | AS36352 | 2026-07-26 | — |
| 23.95.14.48 | 60002 | C2 | VShell | — | — | US | AS36352 | 2026-07-26 | — |
| 143.92.51.145 | 8084 | C2 | VShell | — | — | SG | AS152194 | 2026-07-26 | — |
| 154.213.178.201 | 8084 | C2 | VShell | — | — | SC | AS54801 | 2026-07-26 | — |
| 206.119.165.12 | 8080 | C2 | VShell | — | — | US | AS133199 | 2026-07-26 | — |
| 117.72.50.18 | 8085 | C2 | VShell | — | — | CN | AS141679 | 2026-07-26 | — |
| 38.54.119.24 | 8080 | C2 | VShell | — | — | US | AS138915 | 2026-07-26 | — |
| 35.206.101.37 | 7443 | C2 | Unknown | — | — | US | AS15169 | 2026-07-26 | — |
| 101.33.76.127 | 80 | C2 | Havoc | — | — | SG | AS132203 | 2026-07-26 | — |
| 101.33.76.127 | 22 | C2 | Havoc | — | — | SG | AS132203 | 2026-07-26 | — |
| 47.238.100.128 | 8080 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-26 | — |
| 209.141.51.42 | 18886 | C2 | VShell | — | — | US | AS53667 | 2026-07-26 | — |
| 160.30.20.216 | 80 | C2 | AsyncRAT | — | — | VN | AS150862 | 2026-07-26 | — |
| 111.170.148.134 | 28888 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-26 | — |
| 47.238.100.128 | 80 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-26 | — |
| 47.238.100.128 | 443 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-26 | — |
| 47.238.100.128 | 4433 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-26 | — |
| 206.119.165.25 | 8080 | C2 | VShell | — | — | US | AS133199 | 2026-07-26 | — |
| 200.234.219.26 | 21 | C2 | Havoc | — | — | BR | AS27715 | 2026-07-26 | — |
| 149.28.128.253 | 8001 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-26 | — |
| 81.70.97.147 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-26 | — |
| 106.75.11.70 | 5357 | C2 | Cobalt Strike | — | — | CN | AS23724 | 2026-07-26 | — |
| 54.178.100.27 | 8021 | C2 | Cobalt Strike | — | — | US | AS16509 | 2026-07-25 | 2026-08-01 |
| 157.20.182.22 | 4444 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-07-25 | 2026-08-01 |
| 15.197.162.184 | 443 | C2 | Nanocore RAT | — | — | US | AS16509 | 2026-07-25 | — |
| 106.75.11.70 | 47001 | C2 | Cobalt Strike | — | — | CN | AS23724 | 2026-07-25 | — |
| 106.75.11.70 | 5986 | C2 | Cobalt Strike | — | — | CN | AS23724 | 2026-07-25 | — |
| 106.75.11.70 | 3389 | C2 | Cobalt Strike | — | — | CN | AS23724 | 2026-07-25 | — |
| 60.205.115.92 | 44322 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 81.70.21.248 | 8000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-25 | — |
| 114.55.96.192 | 8888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 47.76.51.107 | 5677 | C2 | ValleyRAT | — | — | US | AS45102 | 2026-07-25 | — |
| 43.138.148.100 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 122.51.215.90 | 18080 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 41.216.189.163 | 8080 | C2 | AdaptixC2 | — | — | ZA | AS211138 | 2026-07-25 | — |
| 41.216.189.163 | 80 | C2 | AdaptixC2 | — | — | ZA | AS211138 | 2026-07-25 | — |
| 41.216.189.163 | 443 | C2 | AdaptixC2 | — | — | ZA | AS211138 | 2026-07-25 | — |
| 82.158.88.41 | 7443 | C2 | Unknown | — | — | US | AS401701 | 2026-07-25 | 2026-08-01 |
| 46.246.12.2 | 6490 | C2 | DCRat | — | — | SE | AS42708 | 2026-07-25 | 2026-08-01 |
| 37.244.233.190 | 4433 | C2 | DanaBot | — | — | HR | AS12810 | 2026-07-25 | 2026-08-01 |
| 27.124.20.3 | 4321 | C2 | AdaptixC2 | — | — | SG | AS152194 | 2026-07-25 | 2026-08-01 |
| 2.27.248.209 | 4321 | C2 | AdaptixC2 | — | — | US | AS207043 | 2026-07-25 | 2026-08-01 |
| 185.147.83.59 | 48321 | C2 | AdaptixC2 | — | — | RU | AS41722 | 2026-07-25 | 2026-08-01 |
| 146.70.87.23 | 43225 | C2 | AdaptixC2 | — | — | RO | AS9009 | 2026-07-25 | 2026-08-01 |
| 144.208.127.87 | 10443 | C2 | AdaptixC2 | — | — | US | AS395092 | 2026-07-25 | 2026-08-01 |
| 141.255.164.33 | 80 | C2 | Tsundere | — | — | PA | AS51852 | 2026-07-25 | 2026-08-01 |
| 103.67.163.201 | 8808 | C2 | AsyncRAT | — | — | VN | AS150895 | 2026-07-25 | 2026-08-01 |
| 89.124.104.192 | 8080 | C2 | AdaptixC2 | — | — | AE | AS216071 | 2026-07-25 | — |