First and foremost; Happy new year 2023 !

A new year celebration is not complete without a recap of the previous year. So here it is, graphics and compilation of what was seen by the C2 tracker in 2022.

A total of 979 Live C2 panels were registered in the tracker from January to December 2022. The panels were spread across 56 malware families. Some big malware name left the trakcer while new families made it in.

TOP10 of malware names

MalwareVolume
Collector179
AgentTesla145
Oski97
Amadey86
Keitaro77
Mars68
Aurora58
Lokibot54
Azorult28
Gomorrah21

 

TOP10 Hosting Country

CountryVolume
Russia386
United States230
NetherLand68
Germany50
Vietnam41
Luxembourg19
Bulgaria16
Sechelles14
United Kingdom13
KAzakhstan12

 

Top10 Hosting IP addresses

IP addressVolumeAS Name
185.179.188.13977WEBHOST1-AS
141.8.197.4259SPRINTHOST
103.151.122.11040VNPT-AS-VN VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
141.8.192.15126SPRINTHOST
141.8.193.23618SPRINTHOST
198.251.89.14413PONYNET
142.4.0.13510UNIFIEDLAYER-AS-1
144.76.115.368HETZNER-AS
141.8.192.1697SPRINTHOST
141.8.192.586SPRINTHOST

 

TOP10 Hostnames

HostnameVolume
103.151.122.11040
sempersim.su16
agusanplantation.com13
136.144.41.766
renox.lol6
208.67.105.1616
171.22.30.1646
update1.com5
107.189.4.2535
cq65758.tmweb.ru4