Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 103.75.201.2 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:103.75.201.2
Hostname:n/a
AS number:AS133496
AS name:CDNPLUSCOLTD-AS-AP CDN PLUS CO., LTD.
Country:- TH
First seen:2021-08-09 13:50:58 UTC
Last online:2021-08-18 02:xx:xx UTC
Malware:Dridex

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-08-09 13:50:58103.75.201.2443
Dridex
Offline
2021-08-18 02:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 103.75.201.2. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-08-09 18:37:25bf31164a5deaee1cac41ac616c681fffDLL dllVirustotal results 29.41%
Dridex
2021-08-09 18:35:561381d29a2a7813dce46d209fca326aceDLL dllVirustotal results 20.59%
Dridex
2021-08-09 16:17:49b899ca019ec2c264b55b3fee06e1db23DLL dllVirustotal results 19.15%
Dridex
2021-08-09 15:37:297bff5016cd06a6fe1bdfdb438797ee5dDLL dllVirustotal results 27.94%
Dridex
2021-08-09 14:38:52db319d2a5c00daff8671ea0760dfcfafDLL dllVirustotal results 20.59%
Dridex
2021-08-09 13:55:555e8bc4eaa08af3edaa1d55c461a290deDLL dllVirustotal results 29.41%
Dridex
2021-08-09 13:52:5153effb3a2a288478a7359e02605e48cfDLL dllVirustotal results 23.88%
Dridex
2021-08-09 13:32:59a34eab5a9974d47912e490327d2a29f4DLL dlln/a
Dridex