| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 96.9.231.213 | 443 | C2 | AdaptixC2 | — | — | US | AS8888 | 2026-07-15 | — |
| 158.178.230.77 | 443 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-15 | — |
| 195.58.146.40 | 443 | C2 | Havoc | — | — | DK | AS200651 | 2026-07-14 | — |
| 162.14.110.164 | 8088 | C2 | VShell | — | — | CN | AS45090 | 2026-07-14 | — |
| 195.201.12.101 | 4782 | C2 | Quasar RAT | — | — | DE | AS24940 | 2026-07-14 | — |
| 158.178.230.77 | 8080 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-14 | — |
| 158.178.230.77 | 80 | C2 | Cobalt Strike | — | — | US | AS31898 | 2026-07-14 | — |
| 175.210.184.125 | 8000 | C2 | AsyncRAT | — | — | KR | AS4766 | 2026-07-14 | — |
| 206.119.178.109 | 18443 | C2 | Cobalt Strike | — | — | US | AS133199 | 2026-07-14 | 2026-07-21 |
| 148.163.71.124 | 4545 | C2 | Unknown | — | — | US | AS53755 | 2026-07-14 | — |
| 47.86.41.109 | 8080 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-14 | — |
| 47.86.41.109 | 80 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-14 | — |
| 47.86.41.109 | 443 | C2 | Cobalt Strike | — | — | US | AS45102 | 2026-07-14 | 2026-07-16 |
| 39.105.94.168 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-14 | — |
| 162.33.179.231 | 80 | C2 | KongTuke | — | — | US | AS399629 | 2026-07-14 | — |
| 152.42.189.206 | 12345 | C2 | Aisuru | — | — | US | AS14061 | 2026-07-14 | — |
| 23.27.52.106 | 8080 | C2 | AdaptixC2 | — | — | US | AS149440 | 2026-07-14 | — |
| 23.27.52.106 | 80 | C2 | AdaptixC2 | — | — | US | AS149440 | 2026-07-14 | — |
| 39.105.94.168 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-14 | — |
| 87.232.83.18 | 443 | C2 | Havoc | — | — | NL | AS63023 | 2026-07-14 | 2026-07-21 |
| 85.206.168.238 | 4646 | C2 | Remcos | — | — | LT | AS61272 | 2026-07-14 | 2026-07-21 |
| 64.89.161.190 | 8808 | C2 | AsyncRAT | — | — | US | AS205759 | 2026-07-14 | 2026-07-21 |
| 45.74.7.107 | 5691 | C2 | Remcos | — | — | US | AS202412 | 2026-07-14 | 2026-07-21 |
| 45.155.69.254 | 1488 | C2 | AdaptixC2 | — | — | SC | AS214927 | 2026-07-14 | 2026-07-21 |
| 217.60.241.10 | 7707 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-07-14 | 2026-07-21 |
| 192.169.7.60 | 8808 | C2 | AsyncRAT | — | — | US | AS199959 | 2026-07-14 | 2026-07-21 |
| 192.169.7.60 | 7707 | C2 | AsyncRAT | — | — | US | AS199959 | 2026-07-14 | 2026-07-21 |
| 191.101.130.245 | 5199 | C2 | AsyncRAT | — | — | AE | AS396073 | 2026-07-14 | 2026-07-21 |
| 185.223.57.86 | 8808 | C2 | AsyncRAT | — | — | BG | AS59711 | 2026-07-14 | 2026-07-21 |
| 185.115.164.59 | 53353 | C2 | Remcos | — | — | PH | AS132046 | 2026-07-14 | 2026-07-21 |
| 158.94.211.63 | 32333 | C2 | AdaptixC2 | — | — | TR | AS202412 | 2026-07-14 | 2026-07-21 |
| 155.103.71.115 | 15608 | C2 | Remcos | — | — | US | AS44382 | 2026-07-14 | 2026-07-21 |
| 151.145.34.33 | 8080 | C2 | Chaos | — | — | US | AS31898 | 2026-07-14 | 2026-07-21 |
| 147.182.143.172 | 8080 | C2 | Evilginx | — | — | US | AS14061 | 2026-07-14 | 2026-07-21 |
| 147.124.214.170 | 4056 | C2 | AsyncRAT | — | — | US | AS396073 | 2026-07-14 | 2026-07-21 |
| 103.83.86.48 | 1616 | C2 | Remcos | — | — | TR | AS44382 | 2026-07-14 | 2026-07-21 |
| 179.43.190.13 | 80 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-14 | — |
| 179.43.190.13 | 443 | C2 | Cobalt Strike | — | — | PA | AS51852 | 2026-07-14 | — |
| 128.241.231.135 | 18082 | C2 | VShell | — | — | US | AS213802 | 2026-07-14 | — |
| 162.249.125.141 | 13 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 162.249.125.141 | 80 | Payload | Unknown | — | — | RO | AS25198 | 2026-07-14 | — |
| 27.133.154.218 | 443 | C2 | QakBot | — | — | JP | AS9370 · SAKURA-B SAKURA Internet Inc. | 2026-03-04 | 2026-03-05 |
| 178.62.3.223 | 443 | C2 | QakBot | — | box.nautadb.com | GB | AS14061 · DIGITALOCEAN-ASN - DigitalOcean, LLC | 2026-02-17 | 2026-02-18 |
| 34.204.119.63 | 443 | C2 | QakBot | — | ec2-34-204-119-63.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2026-01-13 | 2026-03-01 |
| 50.16.16.211 | 443 | C2 | QakBot | — | ec2-50-16-16-211.compute-1.amazonaws.com | US | AS14618 · AMAZON-AES | 2025-12-30 | 2026-03-12 |
| 162.243.103.246 | 8080 | C2 | Emotet | — | — | US | AS14061 · DIGITALOCEAN-ASN | 2022-06-04 | 2026-03-07 |