Attacker-controlled ManageEngine Endpoint Central C2 server, previously associated with ValleyRAT and Gh0st RAT.