Active C2 IOCs Note Be careful with the first_seen/last_seen dates in each entry. Don’t judge based on just an IP address.