| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 149.88.66.234 | 21 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-08-19 | — |
| 47.108.86.120 | 111 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | — |
| 47.108.86.120 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-19 | 2026-08-19 |
| 124.222.128.197 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 183.60.226.2 | 7000 | C2 | Unknown | — | — | CN | AS134763 | 2026-08-19 | — |
| 156.251.16.249 | 7800 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-19 | — |
| 156.251.16.249 | 7811 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-08-19 | — |
| 58.87.71.33 | 1999 | C2 | VShell | — | — | CN | AS45090 | 2026-08-19 | — |
| 47.98.102.101 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-19 | — |
| 196.251.107.252 | 24027 | C2 | Remcos | — | — | SC | AS214351 | 2026-08-19 | — |
| 202.61.84.89 | 7800 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-08-19 | — |
| 202.61.84.89 | 7811 | C2 | ValleyRAT | — | — | HK | AS133201 | 2026-08-19 | — |
| 47.94.224.229 | 888 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-18 | — |
| 109.248.160.184 | 8080 | C2 | Havoc | — | — | CZ | AS56971 | 2026-08-18 | 2026-08-19 |
| 117.50.195.220 | 8443 | C2 | VShell | — | — | CN | AS23724 | 2026-08-18 | — |
| 149.88.66.234 | 8089 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-08-18 | — |
| 124.220.34.180 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 124.220.34.180 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 124.220.34.180 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 117.72.125.206 | 443 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 92.63.180.96 | 7443 | C2 | Unknown | — | — | AE | AS58955 | 2026-08-18 | 2026-08-19 |
| 91.92.42.94 | 4851 | C2 | AsyncRAT | — | — | BG | AS197170 | 2026-08-18 | 2026-08-19 |
| 91.92.243.36 | 56002 | C2 | PureRAT | — | — | TR | AS202412 | 2026-08-18 | 2026-08-19 |
| 46.63.0.187 | 443 | C2 | Havoc | — | — | UA | AS51784 | 2026-08-18 | 2026-08-19 |
| 45.59.120.82 | 7001 | C2 | DCRat | — | — | US | AS14956 | 2026-08-18 | 2026-08-19 |
| 23.175.48.7 | 6606 | C2 | AsyncRAT | — | — | US | AS398357 | 2026-08-18 | 2026-08-19 |
| 195.177.94.19 | 56003 | C2 | PureRAT | — | — | UA | AS214961 | 2026-08-18 | 2026-08-19 |
| 185.199.197.93 | 1488 | C2 | AdaptixC2 | — | — | GB | AS212171 | 2026-08-18 | 2026-08-19 |
| 178.211.155.154 | 56003 | C2 | PureRAT | — | — | UA | AS49276 | 2026-08-18 | 2026-08-19 |
| 176.96.138.71 | 56003 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-18 | 2026-08-19 |
| 172.252.172.33 | 56003 | C2 | PureRAT | — | — | US | AS153706 | 2026-08-18 | 2026-08-19 |
| 172.252.172.31 | 56003 | C2 | PureRAT | — | — | US | AS153706 | 2026-08-18 | 2026-08-19 |
| 154.222.16.160 | 9098 | C2 | Mirai | — | — | SC | AS401701 | 2026-08-18 | 2026-08-19 |
| 124.198.131.129 | 8808 | C2 | AsyncRAT | — | — | NL | AS210558 | 2026-08-18 | 2026-08-19 |
| 102.117.161.35 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-08-18 | 2026-08-19 |
| 103.83.87.183 | 1717 | C2 | XWorm | — | — | TR | AS44382 | 2026-08-18 | — |
| 117.72.125.206 | 8080 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 117.72.125.206 | 80 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 3.80.49.187 | 7443 | C2 | Unknown | — | — | US | AS14618 | 2026-08-18 | — |
| 43.134.49.218 | 12345 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-18 | 2026-08-19 |
| 150.109.93.78 | 37215 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-18 | 2026-08-18 |
| 85.209.129.102 | 56003 | C2 | PureRAT | — | — | SC | AS213702 | 2026-08-18 | 2026-08-19 |
| 213.111.148.180 | 56003 | C2 | PureRAT | — | — | PL | AS6698 | 2026-08-18 | 2026-08-19 |
| 176.96.138.73 | 7000 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-18 | 2026-08-19 |
| 168.144.188.31 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-19 |
| 191.96.166.172 | 2404 | C2 | Remcos | — | — | AE | AS397423 | 2026-08-18 | — |
| 110.42.255.63 | 9090 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |