Last seven days
- First activity
- Sep 2, 2026
- Last activity
- Sep 2, 2026
- Feed role
- C2
- Host form
- 0 IP / 31 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
21 Sep 2
Observed infrastructure
Leading locations
- RU12
- US5
- CA1
- DE1
- NL1
Leading providers
- Cloudflare, Inc.3
- Domain names registrar REG.RU, Ltd3
- JSC RU-CENTER2
- JSC Selectel2
- "Domain names registrar REG.RU", Ltd1
- Akamai Connected Cloud1
Infrastructure traits
- Hosting 20
- Anycast 3
Samples
Recent associated samples
1e165f8a883c9ffe839a39dd0dcc20ac10514dc29711b6354562876e09ceecab Observed Sep 2, 2026Triage
48fe20609577fd132f14a1c681ff1c9ec5cd39d98624a779961de230233ac321 Observed Sep 2, 2026Triage
4ca4d64f3fb25a9f02d35c72857771db4d541b1b05a33753ed11475b6fcc4fc6 Observed Sep 2, 2026Triage
f96f3c6c44d0be1465c87edb95f1cf69dc53052c3bc73f7d592e832358eeaf1d Observed Sep 2, 2026Triage
fe8f5e24ef8bdcec5c1c518e1446af98a0dd140b55804c145e2d1f65254736b7 Observed Sep 2, 2026Triage
2299c9c2647a98800be9fdc5e68fc74919c32cf23e00c54d04b6c152783d8726 Observed Sep 2, 2026Triage
3a3980880affa92e46e02b937efd62e323eb6ec4fd60fa1f105813ec7c18458e Observed Sep 2, 2026Triage
44406b907a6407e6392b029c0df26d3dea3a18da4a596e50bae063026558170c Observed Sep 2, 2026Triage
759efa597d017ac0871c2146f2513be00453297356951e83e44d6220fd67fb0b Observed Sep 2, 2026Triage
b50ed7a1d4c237c4da4725ea0c572df04772952a39d40203d591fe6c9a29c78e Observed Sep 2, 2026Triage
Exploited software
Vulnerabilities linked to Berbew
1 CVEsMITRE ATT&CK
