Derp.ca
Data by Hatching Triage opens in a new tab

millenniumrat

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 31, 2026
Last activity
Aug 3, 2026
Feed role
C2 / Distribution
Host form
2 IP / 3 hostnames

Leading locations

  • NL3
  • RU1
  • US1

Leading providers

  • GTHost2
  • Cloudflare, Inc.1
  • Telegram Messenger Inc1
  • VDSka hosting1

Infrastructure traits

  • Hosting 5
  • Anycast 1

Samples

Recent associated samples

16133dc85fec6bd94624219e920fcbd683dfcdff6389b52e0bb4fc7f17bc37b0
Observed Aug 3, 2026Triage
5f45be41943b7fd34a8871f75417e93d497e65a2be0a317c0d9e81f9c7cb8b84
Observed Aug 3, 2026Triage
748a02784c8a04459884778a66b2dbb5156b01b324c7b73f06c8058596d1a030
Observed Aug 3, 2026Triage
afc9eb56e7982416bcf7c025756d8f88845313b8a0cb5773e48c3f24d47a1c7e
Observed Aug 3, 2026Triage
c95048957b30f2101720abdcff23a17c52ad35241dcda2fcafab3376015ee882
Observed Aug 3, 2026Triage
5620d27fa1bb9a0b372545490e9abfd7d54c9ac2b50928a7b0718336256c0b66
Observed Jul 31, 2026Triage
e6e448215af5a4f173a89a0c9f829d6abf3fce275af2317310c3bb448a0c35ad
Observed Jul 31, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab