| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.247.47.110 | 12159 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.109 | 8848 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.109 | 12159 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.108 | 8848 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.108 | 12159 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.106 | 8848 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 156.247.47.106 | 12159 | C2 | DCRat | — | — | SC | AS138415 | 2026-07-24 | 2026-07-31 |
| 151.236.21.109 | 2096 | C2 | Havoc | — | — | AT | AS9009 | 2026-07-24 | 2026-07-31 |
| 143.110.132.139 | 65000 | C2 | Unknown | — | — | US | AS14061 | 2026-07-24 | 2026-07-31 |
| 13.143.139.239 | 8808 | C2 | AsyncRAT | — | — | US | AS207513 | 2026-07-24 | 2026-07-31 |
| 13.143.139.239 | 7707 | C2 | AsyncRAT | — | — | US | AS207513 | 2026-07-24 | 2026-07-31 |
| 13.143.139.239 | 6606 | C2 | AsyncRAT | — | — | US | AS207513 | 2026-07-24 | 2026-07-31 |
| 43.144.19.224 | 53 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 119.29.21.84 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 119.29.21.84 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 119.29.21.84 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 216.250.255.1 | 22 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 216.250.255.1 | 888 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 216.250.255.1 | 8000 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 216.250.255.1 | 7000 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 216.250.255.1 | 3306 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 111.228.62.67 | 3000 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 111.228.62.67 | 8181 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 111.228.62.67 | 22 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 111.228.62.67 | 8085 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 111.228.62.67 | 8080 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 216.250.255.1 | 80 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 168.144.135.136 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-24 | 2026-07-27 |
| 27.124.10.162 | 4453 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-07-24 | — |
| 111.228.62.67 | 443 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |
| 111.228.62.67 | 80 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | 2026-07-26 |
| 101.96.224.108 | 50005 | C2 | VShell | — | — | CN | AS137718 | 2026-07-24 | — |
| 27.124.10.162 | 4452 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-07-24 | — |
| 162.19.139.33 | 5553 | C2 | Quasar RAT | — | — | FR | AS16276 | 2026-07-24 | — |
| 103.149.93.150 | 8084 | C2 | VShell | — | — | HK | AS401696 | 2026-07-24 | — |
| 216.250.255.1 | 8080 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-24 | — |
| 115.159.210.123 | 8088 | C2 | VShell | — | — | CN | AS45090 | 2026-07-24 | — |
| 146.56.205.231 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-24 | — |
| 221.132.16.23 | 8000 | C2 | Unknown | — | — | VN | AS45899 | 2026-07-24 | — |
| 102.117.171.29 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-07-24 | — |
| 8.160.167.144 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.140.239.162 | 3000 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 192.252.180.45 | 4449 | C2 | AsyncRAT | — | — | US | AS152194 | 2026-07-24 | — |
| 168.144.135.136 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-24 | — |
| 94.158.245.53 | 9992 | C2 | Quasar RAT | — | — | MD | AS39798 | 2026-07-24 | — |
| 172.245.95.9 | 2404 | C2 | Remcos | — | — | US | AS36352 | 2026-07-24 | — |
| 8.160.167.144 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.160.167.144 | 80 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.160.167.144 | 443 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |
| 8.140.239.162 | 8080 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-24 | — |