Back to ffraud
Threat signatureCriticalMalware
c2_server
Active command-and-control (C2) servers used to manage malware operations. These run frameworks like Cobalt Strike, Metasploit, Sliver, Havoc, or Brute Ratel to control compromised machines.
Related signatures
Check an IP for this and every other signature.
ffraud returns the exact threat tags on any IP, free, no key needed. Or pull the whole labelled dataset from GitHub.