Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 174.20.72.123 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	174.20.72.123
Hostname:	174-20-72-123.mpls.qwest.net
AS number:	AS209
AS name:	CENTURYLINK-US-LEGACY-QWEST
Country:	US
First seen:	2021-11-29 22:51:19 UTC
Last online:	2021-12-05 15:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-11-29 22:51:19	174.20.72.123	443	QakBot	Offline	Yes (2021-11-29 22:55:03 UTC)	2021-12-05 15:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 174.20.72.123. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-12-16 16:04:40	f79f51fc334f3083dcc333129602a94c	dll	44.12%	Quakbot
2021-12-14 17:49:42	62f20e4565b40b78c9b0c1c7f77c1f64	dll	41.79%	n/a
2021-12-09 15:14:11	5a7ce647c5c9111c73b09dc455e317f2	dll	n/a	Quakbot
2021-12-09 12:16:58	083a7886ffd1a916a3991ec80c5e056b	dll	43.08%	Quakbot
2021-12-09 10:57:07	372f17eac16053e13b5ba1e633b8e4bd	dll	15.38%	n/a
2021-12-08 20:25:19	fbc961b721830526e792b882d9d034d2	dll	n/a	n/a
2021-12-07 18:23:34	d1c44137a6f87a33c5ceb168ae1e12c9	dll	n/a	n/a
2021-12-07 18:23:22	f4ea14dc8f33171268b04157c7de9453	dll	n/a	n/a
2021-12-04 20:02:12	bda305b5a97fe6d4f1386b476fda9893	dll	n/a	n/a
2021-12-02 14:50:27	4abce4f1f950875e6b6348546a0d5afd	dll	n/a	Quakbot
2021-12-01 16:37:19	a7be720bdb7a5feafbb77447fc49586b	dll	n/a	n/a
2021-12-01 16:03:28	70ea022ce20cc54eca56b4ef9b49fcb4	dll	n/a	n/a
2021-12-01 15:43:47	68559d55c6f457724e9af0dc8bfab3a5	dll	n/a	n/a
2021-12-01 13:06:47	f79191b94864f5c890e90a349549d1ec	exe	n/a	n/a
2021-12-01 13:06:27	7a6a3e76b82c91fd849c17ab685b08f0	dll	n/a	n/a
2021-12-01 10:31:03	ff7813f09571dfdafaf75abffdc7aab1	dll	21.54%	n/a
2021-11-30 13:49:41	eeac515256bc4bbe247487495bf9a224	dll	43.08%	Quakbot
2021-11-29 23:45:58	1bf61d7d5d8d0d6be3112a8eef0974e5	dll	n/a	Quakbot
2021-11-29 23:45:47	102b3617f0829fd6ef0614fcfd7f8cec	dll	n/a	Quakbot
2021-11-29 20:09:06	0b8b91d967406dbf5fdc02e95009db0e	dll	21.54%	Quakbot
2021-11-29 13:43:57	d3fccce7637c4f09159d811e0c3b211d	dll	n/a	Quakbot