dns

C2 Server

dns THREAT TYPE

Command and Control (C2) servers.

Total Hosts
computer
221.3K
221,312 hosts detected
Avg Threat Score
speed
87.9
average score across hosts
Max Threat Score
warning
100
highest observed score

dns Specific Threat Names

20 entries
# Name Count
1 Cobalt Strike (JA3S) 145,925
2 Metasploit Handler (4444) 37,431
3 Cobalt Strike 17,419
4 Sliver 15,034
5 Verified C2: Metasploit (C2-Tracker) 1,429
6 Covenant C2 1,002
7 Team Server Cert 672
8 Verified C2: Sliver (C2-Tracker) 663
9 Verified C2: Cobalt Strike (C2IntelFeeds) 354
10 Verified C2: PANDA (C2-Tracker) 282
11 Empire 238
12 Deimos C2 210
13 Verified C2: Mythic (C2-Tracker) 186
14 Merlin C2 136
15 Verified C2: Havoc (C2-Tracker) 83
16 Verified C2: Cobalt Strike (C2-Tracker) 58
17 Verified C2: NimPlant (C2-Tracker) 51
18 Verified C2: Metasploit (C2IntelFeeds) 41
19 C2 Server Cert 30
20 NimPlant C2 25

router Top Ports

10 entries
# Port Count
1 443 TCP 83,948
2 8443 TCP 58,573
3 4444 TCP 37,443
4 8083 TCP 7,354
5 8085 TCP 6,120
6 993 TCP 3,219
7 995 TCP 2,821
8 9000 TCP 1,674
9 3000 TCP 1,653
10 80 TCP 1,093

public Top Countries

10 entries
# Country Count
1 US United States 71,459
2 GB United Kingdom 18,283
3 BR Brazil 17,630
4 DE Germany 17,031
5 FR France 14,839
6 NL Netherlands 13,308
7 JP Japan 10,201
8 PT Portugal 7,320
9 AU Australia 4,688
10 CA Canada 4,473

settings Top Services

10 entries
# Service Count
1 http 164,600
2 https 17,612
3 firewall 10,669
4 ssl 6,836
5 router 5,722
6 plesk 3,748
7 imap 3,146
8 pop3 2,663
9 exchange 1,944
10 telnet 1,532
search

Search for C2 Server Threats

Explore all hosts classified as C2 Server with full banner, geolocation, and service details.

search Search threat.type:c2

link Related Threat Types

hubBotnet bug_reportMalware pest_controlRAT phishingPhishing warningSuspicious vpn_lockTor Exit hiveHoneypot