| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 156.248.73.84 | 8081 | C2 | VShell | — | — | SC | AS399077 | 2026-08-12 | — |
| 156.248.73.84 | 80 | C2 | VShell | — | — | SC | AS399077 | 2026-08-12 | — |
| 68.65.123.172 | 21 | C2 | Agent Tesla | — | — | US | AS22612 | 2026-08-12 | — |
| 207.180.58.21 | 7000 | C2 | Unknown | — | — | US | AS213250 | 2026-08-12 | — |
| 186.169.76.60 | 5047 | C2 | Unknown RAT | — | — | CO | AS3816 | 2026-08-12 | — |
| 134.199.153.107 | 443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-12 | — |
| 217.144.187.85 | 3334 | C2 | SnappyClient | — | — | AM | AS210644 | 2026-08-12 | — |
| 43.225.157.17 | 3970 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-12 | — |
| 43.225.157.17 | 3000 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-12 | — |
| 95.85.237.226 | 53535 | C2 | XMRIG | — | — | CZ | AS200823 | 2026-08-12 | — |
| 93.152.223.39 | 9090 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 8080 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 22 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 152.32.240.167 | 9556 | Payload | Unidentified Linux 001 | — | — | HK | AS135377 | 2026-08-12 | — |
| 46.246.14.7 | 7044 | C2 | Vjw0rm | — | — | SE | AS42708 | 2026-08-12 | — |
| 93.152.223.39 | 5900 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 93.152.223.39 | 80 | C2 | Havoc | — | — | BG | AS135388 | 2026-08-12 | — |
| 139.129.23.109 | 8085 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 72.56.52.200 | 9999 | C2 | Mirai | — | — | US | AS39900 | 2026-08-12 | 2026-08-12 |
| 139.129.23.109 | 8084 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 121.89.169.8 | 8081 | C2 | VShell | — | — | CN | AS37963 | 2026-08-12 | — |
| 142.4.58.48 | 1224 | C2 | VShell | — | — | US | AS18450 | 2026-08-12 | — |
| 106.75.178.185 | 8084 | C2 | VShell | — | — | CN | AS58466 | 2026-08-12 | — |
| 180.76.105.117 | 8085 | C2 | VShell | — | — | CN | AS38365 | 2026-08-12 | — |
| 8.130.55.42 | 8888 | C2 | VShell | — | — | SG | AS37963 | 2026-08-12 | — |
| 159.75.123.199 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 159.75.123.199 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 159.75.123.199 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-12 | — |
| 176.149.202.136 | 8808 | C2 | AsyncRAT | — | — | FR | AS5410 | 2026-08-12 | — |
| 113.44.90.0 | 8787 | C2 | Unknown | — | — | CN | AS55990 | 2026-08-11 | — |
| 158.94.208.101 | 8808 | C2 | AsyncRAT | — | — | TR | AS202412 | 2026-08-11 | — |
| 35.209.195.28 | 8080 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 35.209.195.28 | 22 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 35.209.195.28 | 443 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | — |
| 35.209.195.28 | 80 | C2 | Cobalt Strike | — | — | US | AS15169 | 2026-08-11 | 2026-08-13 |
| 43.225.157.17 | 22 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 8000 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 443 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 46.246.14.13 | 7044 | C2 | Vjw0rm | — | — | SE | AS42708 | 2026-08-11 | — |
| 43.225.157.17 | 888 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 8080 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 43.225.157.17 | 80 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 47.122.116.54 | 13676 | C2 | NjRAT | — | — | CN | AS37963 | 2026-08-11 | — |
| 95.179.151.97 | 3333 | C2 | SnappyClient | — | — | US | AS20473 | 2026-08-11 | — |
| 217.144.187.85 | 3333 | C2 | SnappyClient | — | — | AM | AS210644 | 2026-08-11 | — |
| 43.225.157.17 | 8009 | C2 | Cobalt Strike | — | — | HK | AS142403 | 2026-08-11 | — |
| 192.252.179.24 | 22 | C2 | Cobalt Strike | — | — | US | AS152194 | 2026-08-11 | — |
| 178.128.80.204 | 8080 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-11 | — |
| 178.128.80.204 | 443 | C2 | Cobalt Strike | — | — | US | AS14061 | 2026-08-11 | — |
| 176.65.139.244 | 1337 | C2 | Mirai | — | — | DE | AS219502 | 2026-08-11 | — |