Covenant
6 hosts convicted as Covenant command-and-control servers: 6 still listed, 0 archived. First seen 2026-08-23.
About
An open-source .NET C2 framework built around collaborative red-team use. Its author stopped developing it years ago — master has not moved since April 2021 and the dev branch that carried the later work stopped in 2023 — and newer frameworks have displaced it. That says nothing about the age of any server listed here: a C2 framework needs no upstream maintenance to be stood up fresh, and modified Covenant payloads were still being attributed to state actors in 2025.
Ports
Detection packs
Rules for this hub's 6 still-listed hosts, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.
Hosts
Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.
Listed in error?
These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.