| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 203.9.150.13 | 8080 | C2 | Cobalt Strike | — | — | US | AS133752 | 2026-07-21 | — |
| 203.9.150.13 | 80 | C2 | Cobalt Strike | — | — | US | AS133752 | 2026-07-21 | — |
| 151.243.137.78 | 81 | C2 | VShell | — | — | AE | AS212238 | 2026-07-21 | — |
| 106.52.255.211 | 8999 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-21 | — |
| 8.152.201.69 | 8082 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 8.152.201.69 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 103.142.147.19 | 5700 | C2 | Unknown | — | — | HK | AS135581 | 2026-07-21 | — |
| 8.152.201.69 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 8.152.201.69 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 8.152.201.69 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 8.152.201.69 | 50001 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-21 | — |
| 101.200.193.211 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 1.116.121.47 | 5432 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 77.42.90.175 | 9895 | C2 | Remus | — | — | DE | AS24940 | 2026-07-21 | 2026-07-27 |
| 62.171.177.27 | 2930 | C2 | Remus | — | — | DE | AS51167 | 2026-07-21 | 2026-07-21 |
| 47.99.102.231 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 8020 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 7010 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 5.161.192.203 | 443 | Payload | Unknown | — | — | DE | AS213230 | 2026-07-21 | — |
| 213.232.235.51 | 8880 | C2 | ClearFake | — | — | RU | AS200019 | 2026-07-21 | — |
| 47.99.102.231 | 7000 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 8010 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 47.99.102.231 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 43.155.169.245 | 110 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-07-21 | — |
| 152.136.253.101 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 152.136.253.101 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 152.136.253.101 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 45.76.182.55 | 5555 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-21 | — |
| 207.148.66.2 | 8001 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-21 | 2026-07-26 |
| 152.136.253.101 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 152.136.253.101 | 4444 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-21 | — |
| 120.76.143.184 | 23333 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 120.26.208.96 | 61001 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 82.156.155.15 | 2222 | C2 | VShell | — | — | CN | AS45090 | 2026-07-21 | — |
| 5.101.84.75 | 4242 | C2 | PureLogs Stealer | — | — | RU | AS63023 | 2026-07-21 | — |
| 149.28.128.253 | 5555 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-21 | — |
| 4.144.235.121 | 80 | Payload | IClickFix | — | — | US | AS8075 | 2026-07-21 | — |
| 45.76.146.2 | 8001 | C2 | Aisuru | — | — | US | AS20473 | 2026-07-21 | 2026-07-26 |
| 120.26.208.96 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 120.26.208.96 | 33060 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 120.26.208.96 | 61004 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-21 | — |
| 117.72.39.83 | 3306 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-21 | — |
| 185.33.86.141 | 29292 | C2 | AdaptixC2 | — | — | BG | AS202015 | 2026-07-21 | 2026-07-27 |
| 47.236.204.56 | 19999 | C2 | VShell | — | — | US | AS45102 | 2026-07-21 | — |
| 124.220.77.21 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-21 | — |
| 47.108.140.10 | 20885 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-21 | — |
| 43.165.188.19 | 8080 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-07-21 | — |
| 43.155.169.245 | 5353 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-07-21 | — |