| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 39.106.80.126 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 115.190.161.178 | 3306 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-07-15 | — |
| 124.220.6.158 | 3306 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 115.190.161.178 | 22 | C2 | Cobalt Strike | — | — | CN | AS137718 | 2026-07-15 | — |
| 8.219.76.168 | 22 | C2 | Cobalt Strike | — | — | SG | AS45102 | 2026-07-15 | — |
| 124.220.6.158 | 21 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 124.220.6.158 | 111 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 203.83.10.114 | 5671 | C2 | Cobalt Strike | — | — | CN | AS132883 | 2026-07-15 | — |
| 114.134.187.38 | 7000 | C2 | Cobalt Strike | — | — | HK | AS401696 | 2026-07-15 | — |
| 8.134.70.73 | 12345 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-15 | — |
| 8.134.70.73 | 22 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-15 | — |
| 154.82.93.200 | 778 | C2 | ValleyRAT | — | — | SC | AS399077 | 2026-07-15 | — |
| 91.92.241.13 | 443 | Payload | Unknown | — | — | TR | AS202412 | 2026-07-15 | — |
| 8.134.70.73 | 3000 | C2 | Cobalt Strike | — | — | SG | AS37963 | 2026-07-15 | — |
| 70.39.181.126 | 22 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 70.39.181.126 | 21 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 70.39.181.126 | 8080 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 70.39.181.126 | 443 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 193.202.84.99 | 8880 | C2 | Unknown | — | — | IL | AS202226 | 2026-07-15 | — |
| 70.39.181.126 | 80 | C2 | Cobalt Strike | — | — | US | AS979 | 2026-07-15 | — |
| 111.228.55.96 | 22 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 120.76.143.184 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 120.76.143.184 | 24444 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 143.110.142.104 | 8888 | C2 | Unknown | — | — | US | AS14061 | 2026-07-15 | — |
| 82.47.101.76 | 8080 | C2 | DCRat | — | — | GB | AS197194 | 2026-07-15 | 2026-07-21 |
| 74.0.32.137 | 80 | C2 | Evilginx | — | — | US | AS399486 | 2026-07-15 | 2026-07-21 |
| 216.250.254.245 | 6606 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-21 |
| 213.152.186.188 | 18856 | C2 | AsyncRAT | — | — | NL | AS49453 | 2026-07-15 | 2026-07-21 |
| 204.44.69.214 | 14646 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-21 |
| 192.255.195.147 | 14645 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-21 |
| 191.104.219.22 | 8443 | C2 | DeimosC2 | — | — | CO | AS3816 | 2026-07-15 | 2026-07-21 |
| 124.198.132.119 | 5220 | C2 | Remcos | — | — | NL | AS210558 | 2026-07-15 | 2026-07-21 |
| 104.225.104.237 | 2030 | C2 | DCRat | — | — | US | AS36236 | 2026-07-15 | 2026-07-21 |
| 103.11.41.10 | 62452 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-21 |
| 103.11.41.10 | 10443 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-21 |
| 162.14.110.164 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-07-15 | — |
| 107.174.186.201 | 9090 | C2 | VShell | — | — | US | AS36352 | 2026-07-15 | — |
| 34.21.206.134 | 8080 | C2 | VShell | — | — | US | AS396982 | 2026-07-15 | — |
| 163.245.210.240 | 4521 | C2 | Unknown RAT | — | — | US | AS19318 | 2026-07-15 | — |
| 109.122.18.38 | 4525 | C2 | Unknown RAT | — | — | CZ | AS215286 | 2026-07-15 | — |
| 64.89.160.127 | 4561 | C2 | Unknown RAT | — | — | US | AS205759 | 2026-07-15 | — |
| 121.40.49.4 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-15 | — |
| 5.101.81.172 | 8443 | C2 | PureLogs Stealer | — | — | RU | AS63023 | 2026-07-15 | — |
| 133.18.107.191 | 4449 | C2 | Unknown RAT | — | — | JP | AS24282 | 2026-07-15 | — |
| 106.54.44.181 | 801 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-18 |
| 116.11.4.167 | 10443 | C2 | Cobalt Strike | — | — | CN | AS134419 | 2026-07-15 | — |
| 118.89.69.45 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | 2026-07-20 |
| 77.239.125.25 | 5041 | C2 | Unknown RAT | — | — | US | AS215439 | 2026-07-15 | — |
| 216.250.250.247 | 8808 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |
| 216.250.250.247 | 7707 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | — |