“Equation Group” ran the most advanced hacking operation ever uncovered
So there is this new shodan-like database that takes data from massive scans of the Internet (I think?) etc... Might be worth running all C&Cs through it to discover more domains , for example <a href="https://rateip.com/ipv4/190.60.202.4" rel="nofollow">https://rateip.com/ipv4/190.60.202.4</a>