Last seven days
- First activity
- Jul 28, 2026
- Last activity
- Jul 28, 2026
- Feed role
- C2
- Host form
- 1 IP / 0 hostnames
C2 tracking
Derp observations, rolling seven-day window
Samples
Reported operators
"Additionally, we believe a controller for yet another remote access trojan, XpertRAT, was also hosted on this IP in November 2015; however, we did not uncover any samples..."
Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.