Last seven days
- First activity
- Sep 13, 2026
- Last activity
- Sep 13, 2026
- Feed role
- C2
- Host form
- 6 IP / 17 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
15 Sep 13
Observed infrastructure
Leading locations
- DE10
- CH1
- LT1
- LU1
- NL1
- US1
Leading providers
- VPS Dedicated LLC8
- FEMO IT SOLUTIONS LIMITED2
- SWISSNET LLC2
- DigitalOcean, LLC1
- Ghosty Networks LLC1
- UAB Host Baltic1
Infrastructure traits
- Hosting 15
MITRE ATT&CK
CECbot in ATT&CK
12 distinct techniquesTechniques
12 techniques T1496 Resource Hijacking T1036.005 Match Legitimate Resource Name or Location T1105 Ingress Tool Transfer T1090.003 Multi-hop Proxy T1059.004 Unix Shell T1498 Network Denial of Service T1133 External Remote Services T1090.002 External Proxy T1583.008 Malvertising T1190 Exploit Public-Facing Application T1548.001 Setuid and Setgid T1562.001 Disable or Modify Tools
