c2_server
Active command-and-control (C2) servers used to manage malware operations. These run frameworks like Cobalt Strike, Metasploit, Sliver, Havoc, or Brute Ratel to control compromised machines.
Related signatures
Check an IP for this and every other signature.
FFraud returns the exact threat tags on any IP, free and without a key. The confirmed addresses, with their worst category, are also on GitHub as open data.