Derp.ca
Data by Hatching Triage opens in a new tab

HexMage

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Aug 29, 2026
Last activity
Aug 29, 2026
Feed role
C2 / Distribution
Host form
0 IP / 81 hostnames

Leading locations

  • US64
  • DE4
  • GB2
  • IN2
  • AU1
  • FI1
  • FR1
  • IL1
  • NL1
  • RO1
  • RS1

Leading providers

  • Cloudflare, Inc.60
  • Hetzner Online GmbH4
  • 20i Limited1
  • Cloudflare London, LLC1
  • Cyber_Folks SRL1
  • DigitalOcean, LLC1

Infrastructure traits

  • Hosting 79
  • Anycast 63

Samples

Recent associated samples

57e469b60e88efc4633af97f905164399e41b11d96f342af90b344157385a061
Observed Aug 29, 2026Triage
85c1f77c0a4e1ff1094c0bb5f968314e67c69ef98887d67fb580a91b904a242d
Observed Aug 29, 2026Triage
8d88d00ec87a683967f2ee2a3b08ed743074cf035fb7830c5968d8f4ccef5523
Observed Aug 29, 2026Triage
f265a8b7014d82f65cc7ad50ef0d7a0291c629e95e29a7c42ca0a97e437b5016
Observed Aug 29, 2026Triage
f5a292b81eb2d5b7173242b87498c482242fd026c886c5bdbcd3a8a6c35b6d49
Observed Aug 29, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab