| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 121.40.49.4 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-15 | — |
| 5.101.81.172 | 8443 | C2 | PureLogs Stealer | — | — | RU | AS63023 | 2026-07-15 | — |
| 133.18.107.191 | 4449 | C2 | Unknown RAT | — | — | JP | AS24282 | 2026-07-15 | — |
| 106.54.44.181 | 801 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-18 |
| 116.11.4.167 | 10443 | C2 | Cobalt Strike | — | — | CN | AS134419 | 2026-07-15 | — |
| 118.89.69.45 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-20 |
| 77.239.125.25 | 5041 | C2 | Unknown RAT | — | — | US | AS215439 | 2026-07-15 | — |
| 216.250.250.247 | 8808 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 216.250.250.247 | 7707 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 216.250.250.247 | 6606 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 161.248.179.182 | 37171 | C2 | Remcos | — | — | VN | AS150895 | 2026-07-15 | — |
| 102.220.160.104 | 2404 | C2 | Remcos | — | — | NG | AS197769 | 2026-07-15 | — |
| 194.59.31.232 | 2404 | C2 | Remcos | — | — | BG | AS399486 | 2026-07-15 | — |
| 130.12.182.47 | 2404 | C2 | Remcos | — | — | US | AS197769 | 2026-07-15 | — |
| 165.227.80.236 | 443 | C2 | Remcos | — | — | US | AS14061 | 2026-07-15 | — |
| 159.69.204.46 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 157.90.247.15 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 37.27.191.220 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 46.62.203.15 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 116.202.6.159 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 172.233.54.53 | 443 | C2 | Vidar | — | — | US | AS63949 | 2026-07-15 | — |
| 195.201.39.59 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-07-15 | — |
| 82.38.171.235 | 8091 | C2 | Unknown | — | — | GB | AS57043 | 2026-07-15 | — |
| 160.25.72.34 | 2404 | C2 | Remcos | — | — | VN | AS150895 | 2026-07-15 | — |
| 38.146.219.149 | 56001 | C2 | PureRAT | — | — | US | AS397373 | 2026-07-15 | — |
| 185.69.122.37 | 443 | C2 | Unknown RAT | — | — | GB | AS212171 | 2026-07-15 | — |
| 185.69.123.172 | 443 | C2 | Unknown RAT | — | — | GB | AS212171 | 2026-07-15 | — |
| 137.184.133.198 | 443 | C2 | Unknown RAT | — | — | US | AS14061 | 2026-07-15 | — |
| 104.131.86.222 | 443 | C2 | Unknown RAT | — | — | US | AS14061 | 2026-07-15 | — |
| 77.91.123.220 | 443 | C2 | Unknown RAT | — | — | GE | AS212171 | 2026-07-15 | — |
| 176.123.9.22 | 443 | C2 | Unknown RAT | — | — | MD | AS200019 | 2026-07-15 | — |
| 72.5.43.195 | 443 | C2 | Unknown | — | — | US | AS399629 | 2026-07-15 | — |
| 164.37.109.234 | 9035 | C2 | Aisuru | — | — | GB | AS204044 | 2026-07-15 | — |
| 161.35.220.210 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 165.232.100.127 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 178.128.45.212 | 8001 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | — |
| 139.59.141.246 | 8001 | C2 | Aisuru | — | — | SG | AS14061 | 2026-07-15 | — |
| 206.189.144.140 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-15 | 2026-07-18 |
| 217.217.97.75 | 8787 | C2 | AsyncRAT | — | — | DE | AS214961 | 2026-07-15 | 2026-07-21 |
| 38.54.95.51 | 80 | C2 | VShell | — | — | US | AS138915 | 2026-07-15 | — |
| 115.159.212.178 | 8443 | C2 | VShell | — | — | CN | AS45090 | 2026-07-15 | — |
| 101.133.225.51 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 96.9.231.213 | 8080 | C2 | AdaptixC2 | — | — | US | AS8888 | 2026-07-15 | — |
| 96.9.231.213 | 80 | C2 | AdaptixC2 | — | — | US | AS8888 | 2026-07-15 | — |
| 96.9.231.213 | 443 | C2 | AdaptixC2 | — | — | US | AS8888 | 2026-07-15 | — |
| 158.178.230.77 | 443 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-15 | — |
| 195.58.146.40 | 443 | C2 | Havoc | — | — | DK | AS200651 | 2026-07-14 | — |
| 162.14.110.164 | 8088 | C2 | VShell | — | — | CN | AS45090 | 2026-07-14 | — |
| 195.201.12.101 | 4782 | C2 | Quasar RAT | — | — | DE | AS24940 | 2026-07-14 | — |
| 158.178.230.77 | 8080 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-14 | — |