| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 45.87.53.6 | 5003 | C2 | Cobalt Strike | — | — | HK | AS142637 | 2026-07-18 | — |
| 45.87.53.6 | 18082 | C2 | Cobalt Strike | — | — | HK | AS142637 | 2026-07-18 | — |
| 192.144.211.249 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-18 | — |
| 45.87.53.6 | 8888 | C2 | Cobalt Strike | — | — | HK | AS142637 | 2026-07-18 | — |
| 152.42.185.244 | 6001 | C2 | Unknown | — | — | US | AS14061 | 2026-07-18 | — |
| 152.42.185.244 | 8000 | C2 | Unknown | — | — | US | AS14061 | 2026-07-18 | — |
| 152.42.185.244 | 6002 | C2 | Unknown | — | — | US | AS14061 | 2026-07-18 | — |
| 192.144.211.249 | 8888 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-18 | — |
| 151.241.100.197 | 22 | C2 | Unknown | — | — | AE | AS215703 | 2026-07-18 | — |
| 43.167.177.224 | 6666 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-07-18 | — |
| 173.211.46.32 | 8080 | C2 | Quasar RAT | — | — | US | AS212238 | 2026-07-18 | — |
| 43.167.177.224 | 22 | C2 | Cobalt Strike | — | — | SG | AS132203 | 2026-07-18 | — |
| 54.196.93.40 | 7443 | C2 | Unknown | — | — | US | AS14618 | 2026-07-18 | — |
| 43.144.20.144 | 5004 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-18 | — |
| 43.144.20.144 | 53 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-18 | — |
| 43.144.19.224 | 5004 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-18 | — |
| 43.144.20.144 | 3306 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-17 | — |
| 45.194.17.39 | 18443 | C2 | Cobalt Strike | — | — | SC | AS137535 | 2026-07-17 | 2026-07-24 |
| 20.2.87.168 | 7443 | C2 | Unknown | — | — | US | AS8075 | 2026-07-17 | 2026-07-24 |
| 102.117.170.0 | 7443 | C2 | Unknown | — | — | MU | AS23889 | 2026-07-17 | — |
| 62.109.10.128 | 80 | C2 | Unknown | — | — | RU | AS29182 | 2026-07-17 | 2026-07-24 |
| 46.246.82.7 | 2003 | C2 | DCRat | — | — | SE | AS42708 | 2026-07-17 | 2026-07-24 |
| 46.225.160.243 | 8443 | C2 | Havoc | — | — | DE | AS24940 | 2026-07-17 | 2026-07-24 |
| 221.212.219.56 | 8848 | C2 | DCRat | — | — | CN | AS4837 | 2026-07-17 | 2026-07-24 |
| 207.180.29.217 | 6606 | C2 | AsyncRAT | — | — | US | AS29802 | 2026-07-17 | 2026-07-24 |
| 198.23.185.95 | 50 | C2 | AsyncRAT | — | — | US | AS63025 | 2026-07-17 | 2026-07-24 |
| 181.235.4.60 | 5010 | C2 | AsyncRAT | — | — | CO | AS3816 | 2026-07-17 | 2026-07-24 |
| 178.83.226.199 | 9091 | C2 | Evilginx | — | — | GB | AS214036 | 2026-07-17 | 2026-07-24 |
| 157.20.182.17 | 1665 | C2 | AsyncRAT | — | — | IN | AS152485 | 2026-07-17 | 2026-07-24 |
| 15.235.149.212 | 9443 | C2 | Evilginx | — | — | CA | AS16276 | 2026-07-17 | 2026-07-24 |
| 149.104.110.202 | 7443 | C2 | Unknown | — | — | US | AS154177 | 2026-07-17 | 2026-07-24 |
| 147.93.191.75 | 50 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-07-17 | 2026-07-24 |
| 104.249.10.121 | 80 | C2 | BianLian | — | — | GB | AS214961 | 2026-07-17 | 2026-07-24 |
| 104.168.0.147 | 1989 | C2 | AsyncRAT | — | — | US | AS36352 | 2026-07-17 | 2026-07-24 |
| 187.222.70.24 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-07-17 | — |
| 175.43.223.223 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-07-17 | 2026-07-23 |
| 114.134.187.38 | 22 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-07-17 | — |
| 114.134.187.38 | 5000 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-07-17 | — |
| 114.134.187.38 | 8082 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-07-17 | — |
| 47.106.110.47 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-17 | 2026-07-17 |
| 114.134.187.38 | 111 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-07-17 | — |
| 212.103.26.10 | 22 | C2 | Havoc | — | — | FR | AS15557 | 2026-07-17 | — |
| 212.103.26.10 | 8000 | C2 | Havoc | — | — | FR | AS15557 | 2026-07-17 | — |
| 212.103.26.10 | 40056 | C2 | Havoc | — | — | FR | AS15557 | 2026-07-17 | — |
| 146.190.80.105 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-07-17 | — |
| 146.190.80.105 | 40056 | C2 | Havoc | — | — | US | AS14061 | 2026-07-17 | — |
| 47.83.134.97 | 22 | C2 | Havoc | — | — | US | AS45102 | 2026-07-17 | — |
| 20.188.119.195 | 22 | C2 | Havoc | — | — | US | AS8075 | 2026-07-17 | — |
| 20.39.60.137 | 22 | C2 | Havoc | — | — | US | AS8075 | 2026-07-17 | — |
| 20.39.60.137 | 80 | C2 | Havoc | — | — | US | AS8075 | 2026-07-17 | — |