Derp.ca
Data by Hatching Triage opens in a new tab

Koi Loader

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Sep 13, 2026
Last activity
Sep 18, 2026
Feed role
C2 / Distribution
Host form
6 IP / 2 hostnames

Leading locations

  • DE2
  • NL2
  • CN1
  • GB1
  • MD1
  • US1

Leading providers

  • FEMO IT SOLUTIONS LIMITED2
  • Omegatech LTD2
  • AVA HOST SRL1
  • CHINANET Hubei province network1
  • Google LLC1
  • OOO GETWIFI1

Infrastructure traits

  • Hosting 6

Samples

Recent associated samples

00fbfd60c18de3822041dab7a4ce75eb3d0de82e3872e1aafb80b272d49cc3b0
Observed Sep 18, 2026Triage
0d9f012e079915b57adf0d987ca90497e196a64bf1360be4480ff1c95b5d0112
Observed Sep 18, 2026Triage
418844027e421bd687d0301b70cb8f2b5ac81ee069db77fb0ca35aa1571c79ad
Observed Sep 18, 2026Triage
b8bccab2af6c1cf89545897d9bcfac24a0be41721c3860e1a48cc2b8468e62d6
Observed Sep 18, 2026Triage
f426a2adc85e4d07a458aac73c0b33bb13dca76b5b45dd5d4f92ef5b9dfb992e
Observed Sep 18, 2026Triage
05dbb515120ec8a6a453c91833eacf432e67ffe89fd650ac704eefc6bf8de290
Observed Sep 18, 2026Triage
11cd6ea8bc99ebcf41362bc98405ca3458d91c64f398bcea3388aadeb49a00a5
Observed Sep 18, 2026Triage
b926a44910e4f4d55c53fdc6d9cdbfb043059355d55fb3595a3434bd69b1e7e3
Observed Sep 18, 2026Triage
e72b03d7ce71ec92460622726d6bc55228eb8a62d39e82d8749f45fe497ba35c
Observed Sep 18, 2026Triage
f2d177f0733377db07cb939110c64e15e83fc15fbc3fe2787c86e1a2b13c3b8d
Observed Sep 18, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab