Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 116.30.5.32 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:116.30.5.32
Hostname:n/a
AS number:AS4134
AS name:CHINANET-BACKBONE No.31,Jin-rong Street
Country:- CN
First seen:2022-04-18 15:15:09 UTC
Last online:2022-04-19 17:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2022-04-18 15:15:09116.30.5.32995
QakBot
Offline
Yes (2022-04-18 15:20:03 UTC)2022-04-19 17:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 116.30.5.32. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-04-19 23:30:46d5715f6020fdb99e2451c931cfac43fbDLL dllVirustotal results 30.43%
n/a
2022-04-19 21:41:1297c85e9fd81bb31f0f2e57f895f5463bDLL dlln/a
n/a
2022-04-19 17:04:33bd8306d7281e976f17cf15c2fc8273f7DLL dlln/a
n/a
2022-04-19 09:23:575c02722f52a4e451176fe1887883983cDLL dlln/a
n/a
2022-04-19 02:22:47fe61080715e97b623082d86305828bd2DLL dllVirustotal results 10.14%
n/a
2022-04-18 21:16:010abd8a9bf1f0569568be943247941e60DLL dlln/a
n/a
2022-04-18 21:15:14527b8c21310724b075d741bb22137936DLL dlln/a
n/a
2022-04-18 17:55:4909f71e7d509184ef6babe6a2463f7bfdDLL dlln/a
n/a
2022-04-18 16:41:47c867e2db5895d61bc1eedcc4bca8eac6DLL dlln/a
n/a
2022-04-18 16:41:345cbda1468e0679bf46f3494ff5a248efDLL dlln/a
n/a
2022-04-18 16:41:214b16bd9c1043af55800ba004e2deaa61DLL dlln/a
n/a
2022-04-18 15:27:37ce10f105e84ee24e97dccfaea62bc580DLL dlln/a
n/a
2022-04-18 14:52:2204f35d0fa4fb11681b46fa7880eeccaeDLL dllVirustotal results 33.33%
n/a