Malware Botnet C&C
You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 197.14.148.149 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.
Database Entry
| IP address: | 197.14.148.149 |
|---|---|
| Hostname: | n/a |
| AS number: | AS2609 |
| AS name: | TN-BB-AS Tunisia BackBone AS |
| Country: |  TN |
| First seen: | 2023-03-14 17:27:22 UTC |
| Last online: | 2023-03-27 14:xx:xx UTC |
Botnet C&Cs
The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.
| First seen (UTC) | IP address | Port | Malware | Status | Abuse complaint sent? | Last online (UTC) |
|---|---|---|---|---|---|---|
| 2023-03-14 17:27:22 | 197.14.148.149 | 443 | Yes (2023-03-14 17:30:08 UTC) | 2023-03-27 14:xx:xx |
Referencing Malware Samples
The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 197.14.148.149. Please consider that the output is limited to the 500 most recent malware samples.
| Time stamp (UTC) | MD5 hash | File Type | Virustotal | Malware |
|---|---|---|---|---|
| 2023-03-16 17:50:32 | 7555576d5752d18e33dba37be01669cd | xll |  33.33% | |
| 2023-03-15 02:37:17 | 16fbffe8e8da6f6ee2e8ca5fa73b7d1e | xll | n/a | |
| 2023-03-14 17:34:44 | ff58f9cf0740aead678d9e36c0782894 |  dll | 14.49% | |
| 2023-03-14 17:28:23 | e09a3bac10565ee80cbdb7a4b1a5d2af | xll | 11.59% | |
| 2023-03-14 17:16:56 | 35825efb8c006f5a369710852b11230b | dll | 11.59% |