Derp.ca
Data by Hatching Triage opens in a new tab

millenniumrat

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Aug 8, 2026
Last activity
Aug 10, 2026
Feed role
C2 / Distribution
Host form
2 IP / 3 hostnames

Leading locations

  • DE2
  • NL2
  • US1

Leading providers

  • OVH SAS2
  • Amazon.com, Inc.1
  • GTHost1
  • Telegram Messenger Inc1

Infrastructure traits

  • Hosting 5

Samples

Recent associated samples

5620d27fa1bb9a0b372545490e9abfd7d54c9ac2b50928a7b0718336256c0b66
Observed Aug 10, 2026Triage
e6e448215af5a4f173a89a0c9f829d6abf3fce275af2317310c3bb448a0c35ad
Observed Aug 10, 2026Triage
be1a24e5c69d820c147dea25e126c3c1115bd867a464aa38723e9c27343cf1e1
Observed Aug 9, 2026Triage
327443093939ea7d5d087d43dc718de3b86c902f442376e54272a4429fe14be5
Observed Aug 8, 2026Triage
32e167e167c82f04b203c220b56edb95bbc3869254c7b792521a490c97e9507a
Observed Aug 8, 2026Triage
4813b1bd8c65ec474434e049e69cf01d67ff772be7e1717583d2135f630a9ccb
Observed Aug 8, 2026Triage
63e779df2c4821beca329fe9322053a1de1dba4c0e63cb3d569ffc09bbf34267
Observed Aug 8, 2026Triage
748a02784c8a04459884778a66b2dbb5156b01b324c7b73f06c8058596d1a030
Observed Aug 8, 2026Triage
7e03633b4c8e282fa0b53178815d5bebefdb7106a42306dedfbfb6f26f627d87
Observed Aug 8, 2026Triage
16133dc85fec6bd94624219e920fcbd683dfcdff6389b52e0bb4fc7f17bc37b0
Observed Aug 8, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab