| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 70.39.181.126 | 21 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 70.39.181.126 | 8080 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 70.39.181.126 | 443 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 193.202.84.99 | 8880 | C2 | Unknown | — | — | IL | AS202226 | 2026-07-15 | — |
| 70.39.181.126 | 80 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 111.228.55.96 | 22 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 120.76.143.184 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 120.76.143.184 | 24444 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 143.110.142.104 | 8888 | C2 | Unknown | — | — | US | AS14061 | 2026-07-15 | — |
| 82.47.101.76 | 8080 | C2 | DCRat | — | — | GB | AS197194 | 2026-07-15 | 2026-07-21 |
| 74.0.32.137 | 80 | C2 | Evilginx | — | — | US | AS399486 | 2026-07-15 | 2026-07-21 |
| 216.250.254.245 | 6606 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-21 |
| 213.152.186.188 | 18856 | C2 | AsyncRAT | — | — | NL | AS49453 | 2026-07-15 | 2026-07-21 |
| 204.44.69.214 | 14646 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-21 |
| 192.255.195.147 | 14645 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-21 |
| 191.104.219.22 | 8443 | C2 | DeimosC2 | — | — | CO | AS3816 | 2026-07-15 | 2026-07-21 |
| 124.198.132.119 | 5220 | C2 | Remcos | — | — | NL | AS210558 | 2026-07-15 | 2026-07-21 |
| 104.225.104.237 | 2030 | C2 | DCRat | — | — | US | AS36236 | 2026-07-15 | 2026-07-21 |
| 103.11.41.10 | 62452 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-21 |
| 103.11.41.10 | 10443 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-21 |
| 162.14.110.164 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-15 | — |
| 107.174.186.201 | 9090 | C2 | VShell | — | — | US | AS36352 | 2026-07-15 | — |
| 34.21.206.134 | 8080 | C2 | VShell | — | — | US | AS396982 | 2026-07-15 | — |
| 163.245.210.240 | 4521 | C2 | Unknown RAT | — | — | US | AS19318 | 2026-07-15 | — |
| 109.122.18.38 | 4525 | C2 | Unknown RAT | — | — | CZ | AS215286 | 2026-07-15 | — |
| 64.89.160.127 | 4561 | C2 | Unknown RAT | — | — | US | AS205759 | 2026-07-15 | — |
| 121.40.49.4 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-15 | — |
| 5.101.81.172 | 8443 | C2 | PureLogs Stealer | — | — | RU | AS63023 | 2026-07-15 | — |
| 133.18.107.191 | 4449 | C2 | Unknown RAT | — | — | JP | AS24282 | 2026-07-15 | — |
| 106.54.44.181 | 801 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-18 |
| 116.11.4.167 | 10443 | C2 | Cobalt Strike | — | — | CN | AS134419 | 2026-07-15 | — |
| 118.89.69.45 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-20 |
| 77.239.125.25 | 5041 | C2 | Unknown RAT | — | — | US | AS215439 | 2026-07-15 | — |
| 216.250.250.247 | 8808 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 216.250.250.247 | 7707 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 216.250.250.247 | 6606 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 161.248.179.182 | 37171 | C2 | Remcos | — | — | VN | AS150895 | 2026-07-15 | — |
| 102.220.160.104 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-07-15 | — |
| 194.59.31.232 | 2404 | C2 | Remcos | — | — | BG | AS399486 | 2026-07-15 | — |
| 130.12.182.47 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-07-15 | — |
| 165.227.80.236 | 443 | C2 | Remcos | — | — | US | AS14061 | 2026-07-15 | — |
| 159.69.204.46 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 157.90.247.15 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 37.27.191.220 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 46.62.203.15 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 116.202.6.159 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 172.233.54.53 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-07-15 | — |
| 195.201.39.59 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 82.38.171.235 | 8091 | C2 | Unknown | — | — | GB | AS57043 | 2026-07-15 | — |
| 160.25.72.34 | 2404 | C2 | Remcos | — | — | VN | AS150895 | 2026-07-15 | — |