| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 13.51.79.99 | 22 | C2 | Havoc | — | — | US | AS16509 | 2026-07-25 | — |
| 206.189.40.107 | 22 | C2 | Havoc | — | — | US | AS14061 | 2026-07-25 | — |
| 149.62.46.110 | 8085 | C2 | VShell | — | — | DE | AS9312 | 2026-07-25 | — |
| 114.132.89.132 | 3389 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-25 | — |
| 2.50.171.117 | 8808 | C2 | AsyncRAT | — | — | AE | AS5384 | 2026-07-25 | — |
| 114.55.96.192 | 5003 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 58.96.75.176 | 15151 | C2 | Remcos | — | — | AU | AS10143 | 2026-07-25 | — |
| 60.205.115.92 | 44321 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 1.116.121.47 | 65530 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-25 | — |
| 114.55.96.192 | 5000 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 114.55.96.192 | 8080 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 114.55.96.192 | 443 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 4330 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 111.170.148.134 | 22 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 47.102.200.89 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-07-25 | — |
| 119.29.5.85 | 10443 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 60.205.115.92 | 44323 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 80 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 443 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 60.205.115.92 | 22 | C2 | Unknown | — | — | CN | AS37963 | 2026-07-25 | — |
| 189.141.45.95 | 7443 | C2 | Unknown | — | — | MX | AS8151 | 2026-07-25 | — |
| 103.101.85.103 | 4747 | C2 | Quasar RAT | — | — | GB | AS207567 | 2026-07-25 | — |
| 203.195.217.161 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 182.92.117.223 | 1234 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-07-25 | — |
| 111.170.148.134 | 9000 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 81.70.95.138 | 4444 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 134.175.86.167 | 21111 | C2 | VShell | — | — | CN | AS45090 | 2026-07-25 | — |
| 122.51.215.90 | 10011 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-25 | — |
| 111.170.148.134 | 9443 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 87.76.146.91 | 1604 | C2 | NjRAT | — | — | UA | AS15924 | 2026-07-25 | — |
| 111.170.148.134 | 7791 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 3310 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 888 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 111.170.148.134 | 8080 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-25 | — |
| 216.250.255.1 | 9000 | C2 | Cobalt Strike | — | — | US | AS396073 | 2026-07-25 | — |
| 209.200.246.194 | 34586 | C2 | Cobalt Strike | — | — | US | AS215311 | 2026-07-24 | 2026-07-31 |
| 103.193.150.74 | 8087 | C2 | Cobalt Strike | — | — | HK | AS55933 | 2026-07-24 | 2026-07-31 |
| 111.170.148.134 | 80 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-24 | — |
| 111.170.148.134 | 443 | C2 | Unknown | — | — | CN | AS151185 | 2026-07-24 | — |
| 175.43.223.202 | 7443 | C2 | Unknown | — | — | CN | AS4837 | 2026-07-24 | — |
| 111.230.238.243 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 111.230.238.243 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 111.230.238.243 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-07-24 | — |
| 47.96.154.174 | 443 | C2 | Havoc | — | — | CN | AS37963 | 2026-07-24 | — |
| 1.94.106.150 | 9999 | C2 | VShell | — | — | CN | AS55990 | 2026-07-24 | — |
| 82.156.166.227 | 22 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-24 | — |
| 106.52.255.211 | 9000 | C2 | Unknown | — | — | CN | AS45090 | 2026-07-24 | — |
| 113.44.90.0 | 8000 | C2 | Unknown | — | — | CN | AS55990 | 2026-07-24 | — |
| 103.101.85.111 | 4747 | C2 | Quasar RAT | — | — | GB | AS207567 | 2026-07-24 | — |
| 111.228.62.67 | 8000 | C2 | Cobalt Strike | — | — | CN | AS141679 | 2026-07-24 | — |