Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 174.4.89.3 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:174.4.89.3
Hostname:S0106206a94a48863.ok.shawcable.net
AS number:AS6327
AS name:SHAW
Country:- CA
First seen:2023-03-02 18:41:22 UTC
Last online:2023-08-25 23:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2023-03-02 18:41:22174.4.89.3443
QakBot
Offline
Yes (2023-03-02 18:45:10 UTC)2023-08-25 23:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 174.4.89.3. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-06-21 13:51:5811af091b43a7b07b74ae94c0b4ecba27jsVirustotal results 0.00%
n/a
2023-06-21 13:43:12fba31d708b9e34aa0b74f6fba7658d4bjsVirustotal results 1.72%
n/a
2023-06-21 13:43:08d9d0fcdb350260108471399412e5a985zipVirustotal results 1.61%
n/a
2023-06-20 17:13:376679a7d280f6a067a8c04f6fbaf1d253jsVirustotal results 5.08%
n/a
2023-05-30 20:45:59ab8ef3423324168d06b2d122f75ca130msiVirustotal results 3.77%
n/a
2023-05-30 20:45:54e35727b10193fe55df216a1f9d166997msiVirustotal results 5.00%
n/a
2023-05-30 15:54:44665afc8f8b7972f427fe1bd90d263032msin/a
n/a
2023-05-26 22:42:1437f56794fcc202b0568d6005de64fe12jsVirustotal results 6.78%
n/a
2023-05-26 20:38:5284f60d908dc7e65d585d1f1e51a1c211msiVirustotal results 3.33%
n/a
2023-04-20 16:28:3245f241fd144ec617a7610cb4edc51f30DLL dllVirustotal results 21.31%
n/a
2023-03-10 00:01:222bd110d17002ecc13814cfd2fc4cd939DLL dllVirustotal results 27.94%
n/a
2023-03-09 14:39:22f685c47ebacb5ea1d9a4de01713260a1DLL dlln/a
n/a
2023-03-09 12:16:5228da37af50153bee403dc5d3f04a3721DLL dllVirustotal results 17.39%
Quakbot