Derp.ca
Data by Hatching Triage opens in a new tab

masonrat

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Aug 26, 2026
Last activity
Aug 27, 2026
Feed role
C2
Host form
1 IP / 1 hostnames

Leading locations

  • DE2

Leading providers

  • Ferdinand Zink trading as Tube-Hosting1
  • Ferdinand Zink trading as Tube-Hosting1

Infrastructure traits

  • Hosting 2

Samples

Recent associated samples

0e93ba1abf59ca0cf49a8b1e26f7bbd752acf0124b97902c08dd201542df6792
Observed Aug 27, 2026Triage
95503862313886427b681e64b879b2cdf3d193917d2d4c2bbd6b0a893674ae08
Observed Aug 27, 2026Triage
c3f6e14d31f499a5fd02f56a0868bf072188812bc97e041a9a9e3f7869306fe9
Observed Aug 27, 2026Triage
d65f7ec9cb13974cf2f1b94991d830da917ca0ff6db42a5e801463e0f25b7de0
Observed Aug 27, 2026Triage
ee91e58de7b4ed20fc58ee2e9322a98b4e13b406be3915458e5bb706aa7dc565
Observed Aug 27, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab