| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 195.201.41.237 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-18 | — |
| 62.238.106.108 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-18 | — |
| 65.109.30.141 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-18 | — |
| 89.167.3.143 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-18 | — |
| 65.109.20.25 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-18 | — |
| 38.76.183.197 | 443 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-08-18 | 2026-08-19 |
| 38.76.183.197 | 22 | C2 | Cobalt Strike | — | — | US | AS401701 | 2026-08-18 | — |
| 103.236.84.103 | 8089 | C2 | Cobalt Strike | — | — | CN | AS134768 | 2026-08-18 | — |
| 103.236.84.103 | 8080 | C2 | Cobalt Strike | — | — | CN | AS134768 | 2026-08-18 | — |
| 103.236.84.103 | 443 | C2 | Cobalt Strike | — | — | CN | AS134768 | 2026-08-18 | — |
| 117.72.159.96 | 22 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 110.42.255.63 | 9999 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 143.198.84.165 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-19 |
| 176.65.139.202 | 6767 | C2 | Mirai | — | — | DE | AS219502 | 2026-08-18 | 2026-08-17 |
| 43.134.49.218 | 8080 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-18 | 2026-08-19 |
| 159.89.193.17 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-19 |
| 161.35.74.220 | 9034 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-18 |
| 143.198.84.165 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | — |
| 161.35.74.220 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-18 | 2026-08-19 |
| 178.16.52.177 | 443 | C2 | Cobalt Strike | — | — | TR | AS202412 | 2026-08-18 | — |
| 110.42.255.63 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | 2026-08-19 |
| 43.128.113.133 | 9034 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-18 | 2026-08-19 |
| 45.90.98.27 | 3778 | C2 | Mirai | — | — | DE | AS58087 | 2026-08-18 | 2026-08-18 |
| 150.109.93.78 | 9034 | C2 | Aisuru | — | — | SG | AS132203 | 2026-08-18 | 2026-08-19 |
| 117.72.159.96 | 8088 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 117.72.159.96 | 8082 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 117.72.159.96 | 5003 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-08-18 | — |
| 110.42.255.63 | 9000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 110.42.255.63 | 3000 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-18 | — |
| 109.176.19.75 | 8081 | C2 | VShell | — | — | GB | AS212336 | 2026-08-18 | — |
| 111.231.172.132 | 3389 | C2 | VShell | — | — | CN | AS45090 | 2026-08-18 | — |
| 111.170.148.132 | 18000 | C2 | Unknown | — | — | CN | AS151185 | 2026-08-18 | — |
| 109.248.160.184 | 22 | C2 | Havoc | — | — | CZ | AS56971 | 2026-08-18 | — |
| 142.4.58.48 | 1223 | C2 | VShell | — | — | US | AS18450 | 2026-08-18 | — |
| 60.204.204.24 | 5000 | C2 | VShell | — | — | CN | AS55990 | 2026-08-17 | — |
| 154.201.95.162 | 8886 | C2 | VShell | — | — | SC | AS401701 | 2026-08-17 | — |
| 172.93.221.193 | 22 | C2 | Cobalt Strike | — | — | US | AS3258 | 2026-08-17 | — |
| 172.93.221.193 | 8080 | C2 | Cobalt Strike | — | — | US | AS3258 | 2026-08-17 | — |
| 172.93.221.193 | 443 | C2 | Cobalt Strike | — | — | US | AS3258 | 2026-08-17 | — |
| 172.93.221.193 | 80 | C2 | Cobalt Strike | — | — | US | AS3258 | 2026-08-17 | 2026-08-19 |
| 52.141.2.68 | 50000 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-08-17 | — |
| 52.141.2.68 | 8080 | C2 | Cobalt Strike | — | — | US | AS8075 | 2026-08-17 | — |
| 94.143.231.61 | 56001 | C2 | PureRAT | — | — | DE | AS58212 | 2026-08-17 | 2026-08-19 |
| 83.229.120.106 | 45231 | C2 | AdaptixC2 | — | — | HK | AS139659 | 2026-08-17 | 2026-08-19 |
| 64.89.160.127 | 8088 | C2 | AsyncRAT | — | — | US | AS205759 | 2026-08-17 | 2026-08-19 |
| 46.246.6.16 | 7049 | C2 | AsyncRAT | — | — | SE | AS42708 | 2026-08-17 | 2026-08-19 |
| 46.246.6.16 | 2703 | C2 | AsyncRAT | — | — | SE | AS42708 | 2026-08-17 | 2026-08-19 |
| 45.61.114.254 | 56003 | C2 | PureRAT | — | — | US | AS199959 | 2026-08-17 | 2026-08-19 |
| 38.240.47.77 | 8088 | C2 | AsyncRAT | — | — | US | AS931 | 2026-08-17 | 2026-08-19 |
| 217.60.195.226 | 56002 | C2 | PureRAT | — | — | AE | AS209373 | 2026-08-17 | 2026-08-19 |