| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 14.29.160.181 | 443 | C2 | Cobalt Strike | — | — | CN | AS4134 | 2026-07-16 | — |
| 14.29.160.181 | 8888 | C2 | Cobalt Strike | — | — | CN | AS4134 | 2026-07-16 | — |
| 38.60.241.251 | 4443 | C2 | VShell | — | — | US | AS138915 | 2026-07-16 | — |
| 158.178.230.77 | 22 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-16 | — |
| 43.139.50.42 | 60000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 43.139.50.42 | 123 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 43.139.50.42 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 5.56.25.183 | 7033 | C2 | AsyncRAT | — | — | UA | AS53850 | 2026-07-16 | — |
| 152.32.202.240 | 22 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-07-16 | — |
| 43.139.108.161 | 7000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 152.32.132.177 | 22 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-07-16 | — |
| 117.72.181.104 | 2222 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-16 | — |
| 43.139.108.161 | 8193 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 152.32.132.177 | 5003 | C2 | Cobalt Strike | — | — | HK | AS135377 | 2026-07-16 | — |
| 43.136.180.88 | 111 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 43.136.180.88 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 43.136.180.88 | 7000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-16 | — |
| 141.255.162.234 | 22 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-16 | — |
| 117.72.181.104 | 888 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 117.72.181.104 | 59999 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 117.72.181.104 | 34211 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 117.72.178.246 | 9000 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 39.106.205.6 | 22 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-15 | — |
| 154.12.86.154 | 22222 | C2 | Cobalt Strike | — | — | US | AS401696 | 2026-07-15 | — |
| 117.72.178.246 | 3306 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 117.72.178.246 | 4434 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-15 | — |
| 107.174.254.62 | 9443 | C2 | Cobalt Strike | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 139.199.89.128 | 7000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 8090 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 18080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.199.89.128 | 8317 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 34.92.128.98 | 22 | C2 | Cobalt Strike | — | — | US | AS396982 | 2026-07-15 | — |
| 192.253.228.193 | 4412 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-07-15 | — |
| 192.253.228.193 | 4411 | C2 | ValleyRAT | — | — | US | AS152194 | 2026-07-15 | — |
| 82.157.78.201 | 3389 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 116.198.233.179 | 7977 | C2 | Cobalt Strike | — | — | CN | AS137699 | 2026-07-15 | — |
| 81.70.21.248 | 8001 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 139.155.157.79 | 81 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-15 | — |
| 64.89.160.127 | 2026 | C2 | AsyncRAT | — | — | US | AS205759 | 2026-07-15 | 2026-07-22 |
| 64.23.182.12 | 3333 | C2 | Evilginx | — | — | US | AS14061 | 2026-07-15 | 2026-07-22 |
| 5.56.25.238 | 8808 | C2 | AsyncRAT | — | — | UA | AS53850 | 2026-07-15 | 2026-07-22 |
| 216.250.249.83 | 8808 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-22 |
| 216.250.249.83 | 7707 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-15 | 2026-07-22 |
| 204.44.93.75 | 14649 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 204.44.93.75 | 14648 | C2 | Remcos | — | — | US | AS36352 | 2026-07-15 | 2026-07-22 |
| 185.212.131.22 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-07-15 | 2026-07-22 |
| 185.115.164.59 | 7723 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-15 | 2026-07-22 |
| 178.73.192.16 | 8848 | C2 | DCRat | — | — | SE | AS42708 | 2026-07-15 | 2026-07-22 |
| 162.35.175.224 | 3333 | C2 | Evilginx | — | — | US | AS19318 | 2026-07-15 | 2026-07-22 |
| 104.225.104.237 | 3020 | C2 | DCRat | — | — | US | AS36236 | 2026-07-15 | 2026-07-22 |