Skip to content

skinframe

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Sep 30, 2026
Last activity
Oct 7, 2026
Feed role
C2 / Distribution
Host form
3 IP / 334 hostnames

Leading locations

  • US154
  • DE33
  • BR24
  • FR19
  • IR15
  • IN12
  • TR8
  • GB7
  • SG7
  • CA5
  • ID5
  • CY4

Leading providers

  • Oracle Corporation35
  • Cloudflare London, LLC29
  • Cloudflare, Inc.26
  • Hostinger International Limited23
  • OVH SAS23
  • IONOS SE14

Infrastructure traits

  • Hosting 325
  • Anycast 86

Samples

Recent associated samples