Skip to content

Malware Tracker

Tracking active malware infrastructure: C2 servers that malware phones home to, and distribution hosts that deliver payloads. Updated daily from sandbox analysis and community threat intel.

85
Families Tracked (7d)
1,755
Active C2 Hosts (7d)
11,611
Active Distribution Hosts (7d)

C2 Infrastructure Type (7d)

Hosting 88% (1,553)
ISP 9% (156)
Unknown 2% (32)
Business 1% (13)
Government 0% (1)

Distribution Infrastructure Type (7d)

Hosting 84% (9,796)
ISP 10% (1,219)
Business 5% (526)
Unknown 1% (61)
Education 0% (8)
Government 0% (1)

C2 Hosting Countries (7d)

Country Hosts
  1. 1 🇺🇸 US 1,090
  2. 2 🇨🇳 CN 101
  3. 3 🇭🇰 HK 61
  4. 4 🇬🇧 GB 56
  5. 5 🇩🇪 DE 48
  6. 6 🇸🇨 SC 48
  7. 7 🇷🇺 RU 44
  8. 8 🇫🇷 FR 26
  9. 9 🇸🇬 SG 23
  10. 10 🇻🇳 VN 17
  11. 11 Other 241

C2 Hosting Providers (7d)

Provider Hosts
  1. 1 Cloudflare, Inc. 525
  2. 2 GNET INC. 230
  3. 3 DigitalOcean, LLC 84
  4. 4 Shenzhen Tencent Computer Systems Company Limited 35
  5. 5 Hangzhou Alibaba Advertising Co.,Ltd. 30
  6. 6 GLOBAL CONNECTIVITY SOLUTIONS LLP 21
  7. 7 Omegatech LTD 21
  8. 8 Amazon.com, Inc. 20
  9. 9 Hetzner Online GmbH 19
  10. 10 CTG Server Limited 17
  11. 11 Other providers 753

Distribution Countries (7d)

Country Hosts
  1. 1 🇺🇸 US 6,200
  2. 2 🇩🇪 DE 1,814
  3. 3 🇧🇩 BD 544
  4. 4 🇨🇳 CN 517
  5. 5 🇬🇧 GB 380
  6. 6 🇸🇨 SC 364
  7. 7 🇨🇾 CY 267
  8. 8 🇭🇰 HK 262
  9. 9 🇪🇸 ES 202
  10. 10 🇫🇷 FR 165
  11. 11 Other 896

Distribution Providers (7d)

Provider Hosts
  1. 1 Cloudflare, Inc. 4,191
  2. 2 IONOS SE 1,630
  3. 3 FAST ZONE IT 507
  4. 4 CHINA UNICOM China169 Backbone 439
  5. 5 Omegatech LTD 361
  6. 6 Cloudflare London, LLC 301
  7. 7 Hostinger International Limited 267
  8. 8 Wildcard UK Limited 256
  9. 9 CTG Server Limited 250
  10. 10 Oracle Corporation 212
  11. 11 Other providers 3,197

All Tracked Malware (7d)

1–25 of 85 families
AsyncRAT 496 C2 · Jul 14, 2026 VShell 271 C2 · Jul 14, 2026 Quasar RAT 134 C2 · Jul 14, 2026 Remcos 83 C2 · Jul 14, 2026 Cobalt Strike 62 C2 · Jul 14, 2026 Aisuru 48 C2 · Jul 14, 2026 XWorm 41 C2 · Jul 14, 2026 Vidar 38 C2 · Jul 14, 2026 Mirai 33 C2 · Jul 14, 2026 AdaptixC2 31 C2 · Jul 14, 2026 DCRat 27 C2 · Jul 13, 2026 NonEuclid RAT 23 C2 · Jul 14, 2026 Kimwolf 20 C2 · Jul 13, 2026 Clickfix 16 C2 · Jul 14, 2026 StealC 16 C2 · Jul 13, 2026 AIRASHI 15 C2 · Jul 13, 2026 Overlord RAT 15 C2 · Jul 14, 2026 ValleyRAT 14 C2 · Jul 13, 2026 Nanocore RAT 12 C2 · Jul 14, 2026 BADBOX 10 C2 · Jul 11, 2026 Havoc 10 C2 · Jul 14, 2026 Pikabot 9 C2 · Jul 10, 2026 RatonRAT 9 C2 · Jul 14, 2026 ACR Stealer 8 C2 · Jul 11, 2026 Evilginx 8 C2 · Jul 14, 2026

Recent Research

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.