| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 132.145.210.148 | 8443 | C2 | Unknown | — | — | US | AS31898 | 2026-07-22 | 2026-07-28 |
| 104.248.69.160 | 65000 | C2 | Unknown | — | — | US | AS14061 | 2026-07-22 | 2026-07-28 |
| 191.96.224.177 | 5552 | C2 | Quasar RAT | — | — | AE | AS270353 | 2026-07-22 | 2026-07-22 |
| 111.229.248.198 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-22 | — |
| 103.86.65.202 | 8080 | C2 | Cobalt Strike | — | — | HK | AS138995 | 2026-07-22 | — |
| 103.86.65.202 | 443 | C2 | Cobalt Strike | — | — | HK | AS138995 | 2026-07-22 | — |
| 217.60.241.34 | 8808 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-07-22 | 2026-07-28 |
| 217.60.241.34 | 7707 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-07-22 | 2026-07-28 |
| 45.88.91.35 | 7004 | C2 | XWorm | — | — | BG | AS399486 | 2026-07-22 | — |
| 217.60.241.34 | 6606 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-07-22 | 2026-07-28 |
| 93.152.223.30 | 5000 | C2 | Unknown Stealer | — | — | BG | AS135388 | 2026-07-22 | — |
| 159.65.143.171 | 12345 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-22 | — |
| 5.231.70.61 | 3389 | C2 | Mirai | — | — | DE | AS58212 | 2026-07-22 | — |
| 147.90.250.35 | 9155 | C2 | Mirai | — | — | NL | AS212477 | 2026-07-22 | — |
| 104.168.134.25 | 8808 | C2 | AsyncRAT | — | — | US | AS54290 | 2026-07-22 | — |
| 154.219.109.133 | 8848 | C2 | DCRat | — | — | SC | AS401701 | 2026-07-22 | — |
| 31.76.244.171 | 5173 | C2 | Unknown | — | — | US | AS201988 | 2026-07-22 | — |
| 94.26.90.219 | 5173 | C2 | Unknown | — | — | BG | AS207043 | 2026-07-22 | 2026-07-22 |
| 188.227.87.118 | 5173 | C2 | Unknown | — | — | NL | AS208951 | 2026-07-22 | — |
| 94.154.43.102 | 25565 | C2 | Mirai | — | — | UA | AS219502 | 2026-07-22 | — |
| 129.121.114.124 | 25565 | C2 | Mirai | — | — | US | AS31898 | 2026-07-22 | — |
| 129.121.114.124 | 5362 | C2 | Mirai | — | — | US | AS31898 | 2026-07-22 | — |
| 5.231.70.61 | 4621 | C2 | Mirai | — | — | DE | AS58212 | 2026-07-22 | — |
| 158.94.211.212 | 8443 | C2 | PureLogs Stealer | — | — | TR | AS202412 | 2026-07-22 | — |
| 47.94.162.43 | 888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-22 | — |
| 159.75.195.231 | 53 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-22 | — |
| 150.187.25.242 | 8083 | C2 | Cobalt Strike | — | — | VE | AS20312 | 2026-07-22 | — |
| 120.55.3.157 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-22 | — |
| 207.57.121.71 | 9443 | C2 | VShell | — | — | US | AS139659 | 2026-07-22 | — |
| 72.62.195.74 | 5291 | C2 | Remus | — | — | LT | AS47583 | 2026-07-22 | — |
| 149.28.145.14 | 8443 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-22 | — |
| 150.187.25.242 | 3366 | C2 | Cobalt Strike | — | — | VE | AS20312 | 2026-07-22 | — |
| 150.187.25.242 | 33060 | C2 | Cobalt Strike | — | — | VE | AS20312 | 2026-07-22 | — |
| 120.76.143.184 | 5003 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-22 | — |
| 117.72.60.242 | 8084 | C2 | VShell | — | — | CN | AS141679 | 2026-07-22 | — |
| 43.164.191.203 | 995 | C2 | Unknown | — | — | SG | AS132203 | 2026-07-22 | — |
| 47.108.140.10 | 9849 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-22 | — |
| 47.108.140.10 | 65443 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-22 | — |
| 8.141.118.254 | 22 | C2 | Unknown | — | — | SG | AS37963 | 2026-07-22 | — |
| 154.8.155.23 | 8443 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-22 | — |
| 154.8.155.23 | 8080 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-22 | — |
| 154.8.155.23 | 80 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-22 | — |
| 43.131.251.190 | 8084 | C2 | VShell | — | — | SG | AS132203 | 2026-07-22 | — |
| 154.8.155.23 | 443 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-22 | — |
| 154.8.155.23 | 60000 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-22 | — |
| 42.193.201.58 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-22 | — |
| 64.111.93.243 | 8443 | C2 | VShell | — | — | US | AS399629 | 2026-07-22 | — |
| 115.190.237.175 | 8085 | C2 | VShell | — | — | CN | AS137718 | 2026-07-22 | — |
| 47.98.56.18 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-22 | — |
| 47.111.230.105 | 5000 | C2 | VShell | — | — | CN | AS37963 | 2026-07-22 | — |