| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 101.35.129.174 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-10 | — |
| 154.221.25.38 | 8088 | C2 | Cobalt Strike | — | — | SC | AS142403 | 2026-08-10 | — |
| 217.60.241.170 | 8808 | C2 | AsyncRAT | — | — | AE | AS51396 | 2026-08-10 | — |
| 147.124.212.143 | 4333 | C2 | XWorm | — | — | US | AS396073 | 2026-08-10 | — |
| 154.29.72.36 | 6000 | C2 | PureRAT | — | — | US | AS397423 | 2026-08-10 | — |
| 204.77.130.227 | 56003 | C2 | PureRAT | — | — | US | AS139880 | 2026-08-10 | — |
| 204.77.130.227 | 56002 | C2 | PureRAT | — | — | US | AS139880 | 2026-08-10 | — |
| 204.77.130.227 | 56001 | C2 | PureRAT | — | — | US | AS139880 | 2026-08-10 | — |
| 78.47.230.34 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 2.28.63.136 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 178.104.167.253 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 46.62.167.86 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 2.28.53.243 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 46.62.173.126 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 62.238.20.117 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 89.167.18.40 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 89.167.23.148 | 443 | C2 | Vidar | — | — | DE | AS24940 | 2026-08-10 | — |
| 119.45.239.141 | 5555 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-10 | — |
| 49.235.110.173 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-10 | — |
| 149.28.37.137 | 8080 | C2 | AdaptixC2 | — | — | US | AS20473 | 2026-08-10 | — |
| 64.89.160.16 | 3322 | C2 | Unknown RAT | — | — | US | AS205759 | 2026-08-10 | — |
| 142.132.253.231 | 8888 | C2 | PureLogs Stealer | — | — | DE | AS24940 | 2026-08-10 | — |
| 52.203.242.163 | 7890 | C2 | Unknown | — | — | US | AS14618 | 2026-08-10 | — |
| 52.203.242.163 | 7835 | C2 | Unknown | — | — | US | AS14618 | 2026-08-10 | — |
| 158.94.211.92 | 80 | Payload | Unknown | — | — | TR | AS202412 | 2026-08-10 | — |
| 64.89.161.78 | 2817 | C2 | Remcos | — | — | US | AS205759 | 2026-08-10 | — |
| 155.117.224.68 | 8080 | C2 | VShell | — | — | US | AS205548 | 2026-08-10 | — |
| 106.75.178.185 | 80 | C2 | VShell | — | — | CN | AS58466 | 2026-08-10 | — |
| 20.215.224.217 | 8080 | C2 | Quasar RAT | — | — | US | AS8075 | 2026-08-10 | — |
| 117.24.4.112 | 5555 | C2 | Cobalt Strike | — | — | CN | AS133776 | 2026-08-10 | — |
| 91.219.238.166 | 8443 | C2 | PureLogs Stealer | — | — | HU | AS56322 | 2026-08-10 | 2026-08-09 |
| 91.219.238.82 | 56001 | C2 | PureRAT | — | — | HU | AS56322 | 2026-08-10 | — |
| 91.219.238.82 | 8541 | C2 | XWorm | — | — | HU | AS56322 | 2026-08-10 | — |
| 180.93.116.41 | 56999 | C2 | Mirai | — | — | VN | AS7602 | 2026-08-10 | — |
| 91.219.238.166 | 8045 | C2 | DCRat | — | — | HU | AS56322 | 2026-08-10 | — |
| 130.94.14.110 | 443 | C2 | Cobalt Strike | — | — | US | AS154177 | 2026-08-10 | — |
| 206.237.12.167 | 10443 | C2 | Cobalt Strike | — | — | US | AS932 | 2026-08-10 | — |
| 34.11.43.142 | 8808 | C2 | AsyncRAT | — | — | US | AS396982 | 2026-08-10 | — |
| 130.12.180.51 | 43782 | C2 | RedTail | — | — | US | AS202412 | 2026-08-10 | — |
| 137.184.70.190 | 9035 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-10 | — |
| 143.92.52.207 | 2078 | C2 | DCRat | — | — | SG | AS152194 | 2026-08-10 | — |
| 139.196.181.1 | 8808 | C2 | VShell | — | — | CN | AS37963 | 2026-08-09 | — |
| 111.229.135.130 | 8084 | C2 | VShell | — | — | CN | AS45090 | 2026-08-09 | — |
| 64.90.11.101 | 8089 | C2 | Unknown | — | — | HK | AS979 | 2026-08-09 | — |
| 46.151.182.200 | 60195 | C2 | Mirai | — | — | NL | AS205759 | 2026-08-09 | — |
| 64.90.11.101 | 8001 | C2 | Unknown | — | — | HK | AS979 | 2026-08-09 | — |
| 37.221.66.27 | 443 | C2 | Nanocore RAT | — | — | RU | AS48753 | 2026-08-09 | — |
| 64.90.11.101 | 9321 | C2 | Unknown | — | — | HK | AS979 | 2026-08-09 | — |
| 64.90.11.101 | 3306 | C2 | Unknown | — | — | HK | AS979 | 2026-08-09 | — |
| 64.90.11.101 | 80 | C2 | Unknown | — | — | HK | AS979 | 2026-08-09 | — |