| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 45.148.18.38 | 58798 | C2 | Remcos | — | — | SE | AS42675 | 2026-08-13 | — |
| 204.10.160.200 | 3608 | C2 | STRRAT | — | — | CA | AS64236 | 2026-08-13 | — |
| 89.106.83.225 | 8443 | C2 | PureLogs Stealer | — | — | DE | AS200051 | 2026-08-13 | — |
| 91.92.47.238 | 7777 | C2 | Unknown RAT | — | — | BG | AS197170 | 2026-08-13 | — |
| 91.92.47.238 | 7979 | C2 | Unknown RAT | — | — | BG | AS197170 | 2026-08-13 | — |
| 91.92.47.238 | 7878 | C2 | Unknown RAT | — | — | BG | AS197170 | 2026-08-13 | — |
| 169.58.23.30 | 22 | C2 | Quasar RAT | — | — | DE | AS51167 | 2026-08-13 | — |
| 68.64.182.169 | 4190 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 993 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 192.53.121.159 | 9035 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | — |
| 172.234.103.104 | 8001 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | 2026-08-13 |
| 103.3.61.234 | 8443 | C2 | Aisuru | — | — | SG | AS63949 | 2026-08-13 | — |
| 172.233.163.205 | 37215 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | — |
| 104.105.140.237 | 8001 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | 2026-08-13 |
| 192.53.121.159 | 8001 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | 2026-08-13 |
| 103.3.61.234 | 8001 | C2 | Aisuru | — | — | SG | AS63949 | 2026-08-13 | 2026-08-13 |
| 172.233.163.205 | 8001 | C2 | Aisuru | — | — | US | AS63949 | 2026-08-13 | 2026-08-13 |
| 94.26.90.126 | 80 | Payload | IClickFix | — | — | BG | AS207043 | 2026-08-13 | — |
| 194.116.236.54 | 2467 | C2 | XWorm | — | — | TR | AS44382 | 2026-08-13 | — |
| 31.40.204.178 | 2404 | C2 | Remcos | — | — | TR | AS44382 | 2026-08-13 | — |
| 107.175.101.136 | 8823 | C2 | XWorm | — | — | US | AS20278 | 2026-08-13 | — |
| 45.152.183.18 | 8707 | C2 | AsyncRAT | — | — | RO | AS9009 | 2026-08-13 | — |
| 68.64.182.169 | 587 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 119.29.122.42 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 119.29.122.42 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 119.29.122.42 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 68.64.182.169 | 3306 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 202.181.188.64 | 1488 | C2 | Quasar RAT | — | — | PL | AS216129 | 2026-08-13 | — |
| 68.64.182.169 | 8010 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 5727 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 111 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.182.169 | 443 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 38.240.32.5 | 54984 | C2 | Nanocore RAT | — | — | US | AS931 | 2026-08-13 | — |
| 8.210.155.34 | 6868 | C2 | ValleyRAT | — | — | SG | AS45102 | 2026-08-13 | — |
| 118.107.9.161 | 1112 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-13 | — |
| 68.64.182.169 | 8080 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 192.25.102.246 | 8088 | C2 | VShell | — | — | US | AS8796 | 2026-08-13 | — |
| 159.75.123.199 | 21 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 118.107.9.161 | 1113 | C2 | ValleyRAT | — | — | SG | AS152194 | 2026-08-13 | — |
| 216.250.249.188 | 62520 | C2 | PureLogs Stealer | — | — | US | AS396073 | 2026-08-13 | — |
| 27.124.38.42 | 8383 | C2 | Unidentified VBS 001 | — | — | SG | AS152194 | 2026-08-13 | — |
| 134.122.136.2 | 8383 | C2 | Unidentified VBS 001 | — | — | SG | AS152194 | 2026-08-13 | — |
| 68.64.183.127 | 8090 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 68.64.183.127 | 5555 | C2 | Cobalt Strike | — | — | US | AS139659 | 2026-08-13 | — |
| 139.196.217.227 | 80 | C2 | Cobalt Strike | — | — | CN | AS37963 | 2026-08-13 | — |
| 45.130.147.57 | 8085 | C2 | VShell | — | — | AE | AS49392 | 2026-08-13 | — |
| 40.160.232.46 | 4429 | C2 | DCRat | — | — | US | AS16276 | 2026-08-13 | — |
| 159.75.123.199 | 5003 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-13 | — |
| 139.196.231.194 | 80 | C2 | Unknown | — | — | CN | AS37963 | 2026-08-13 | — |
| 103.30.7.55 | 8477 | C2 | ValleyRAT | — | — | HK | AS135357 | 2026-08-13 | — |