Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 104.161.32.108 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	104.161.32.108
Hostname:	n/a
AS number:	AS53755
AS name:	IOFLOOD
Country:	US
First seen:	2021-01-19 13:55:02 UTC
Last online:	2021-01-20 16:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-01-19 13:55:02	104.161.32.108	443	TrickBot	Offline	No	2021-01-20 16:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 104.161.32.108. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-01-17 17:55:42	b2d4e865951e6ff0189dfdbbf8b6d6e6	exe	n/a	n/a
2020-10-24 19:06:43	be44189c0d55232e449c06a352cf7be4	exe	53.52%	BazaLoader
2020-10-24 19:03:00	1ba0fb5f18bdb2c775c6aa80b56ea4cb	exe	64.29%	BazaLoader
2020-10-24 19:01:43	01ad841bff0d717a51c9ecaea8d3fa44	exe	30.88%	BazaLoader
2020-10-24 19:01:27	6ced64f203f0678043bfa3dd78ad7459	exe	61.97%	BazaLoader
2020-10-24 18:59:40	3897bc291739feea591e9f0ebd950bc7	exe	61.97%	BazaLoader
2020-10-24 18:56:18	e647bf42cbb1c6f40d51518d0b2bfcfc	exe	39.71%	TrickBot
2020-10-24 18:52:19	a855015d1b3bc071dd877b63dde05982	exe	14.49%	BazaLoader
2020-10-24 18:50:29	11297a4a47186ac84c0b48221107f24b	exe	57.97%	BazaLoader
2020-10-24 18:47:10	0001e3c243f00929feb2d0c729a5b10d	exe	37.68%	BazaLoader
2020-10-24 18:46:52	b445f72f0095bb3190c6247b60df5790	exe	63.77%	BazaLoader
2020-10-24 18:43:14	0c52cf7607644b5abe668188a03d8aea	exe	68.66%	BazaLoader
2020-10-24 18:41:39	06ee60353f2a38afd5f42efd0c90d877	exe	56.34%	BazaLoader
2020-10-22 16:58:45	49fe9ec9e2e563edade884924808bd24	exe	n/a	n/a