Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 197.254.14.238 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:197.254.14.238
Hostname:197.254.14.238.acesskenya.net
AS number:AS15808
AS name:ACCESSKENYA-KE ACCESSKENYA GROUP LTD is an ISP serving
Country:- KE
First seen:2021-05-21 11:41:08 UTC
Last online:2021-06-20 23:xx:xx UTC
Malware:TrickBot

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusLast online (UTC)
2021-05-21 11:41:08197.254.14.238443
TrickBot
Offline
2021-06-20 23:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 197.254.14.238. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-07-04 20:33:05562255c763893489cbf2836620322d05Executable exeVirustotal results 65.71%
TrickBot
2021-06-29 18:05:55d5027ed0ea80dc469af07a5b36ba0651Executable exeVirustotal results 69.57%
TrickBot
2021-06-26 01:21:19a6fedffa64bd937c0b1a183549c482bbExecutable exeVirustotal results 59.42%
n/a
2021-06-23 15:50:394cef6239c3a74448247a78f6855cb489Executable exeVirustotal results 34.29%
TrickBot
2021-06-23 15:19:13557f06d5d478ae51384b709d3b72634eExecutable exeVirustotal results 28.99%
TrickBot
2021-06-23 14:00:469481541d29f543ba93232562641e044bExecutable exeVirustotal results 32.86%
n/a
2021-06-23 09:30:2156589fb30f01fe50174660b5ce2c85bdExecutable exen/a
n/a
2021-06-23 08:41:37f4f6d7d458859ba2ce49990173113db5Executable exeVirustotal results 24.64%
n/a
2021-06-23 07:13:55ca77b058996f61374882501e47bb5523Executable exen/a
n/a
2021-06-23 06:15:2163531652cb468805cd7d4ad416782abbExecutable exen/a
TrickBot
2021-06-23 05:46:33dc83ae9773206637712649e3a3ee6c30Executable exen/a
n/a
2021-06-23 05:31:58f8f58d3edede27896aaed4fb8b2faf4aExecutable exen/a
n/a
2021-06-23 05:22:246efbb39f1cb9e9abb0369c10e66c94a0Executable exen/a
n/a
2021-06-23 04:29:11fdde25798fe58d9b80f88d9dedd90ac1Executable exen/a
TrickBot
2021-06-23 04:24:4451452e51449a2df63d846872da9c82f5Executable exen/a
n/a
2021-06-23 02:47:25d2e67d3d912d3bbc22eccd1884cc20e2Executable exen/a
n/a
2021-06-23 02:10:443cc0a16123dd225fed4dbef1f88a5e71Executable exen/a
n/a
2021-06-23 01:43:501af2ac85228651957d83757a8f319b7dExecutable exen/a
n/a
2021-06-23 01:19:24b2724d1d58557143647295d7e79425f5Executable exen/a
n/a
2021-06-23 00:07:55feccae7cec0a0765c0222316f1ecc744Executable exen/a
n/a
2021-06-22 23:36:39af0fade693532c262f30a3bfff3d76faExecutable exen/a
n/a
2021-06-22 23:24:371bc60859c0e8ce3076030b60230e61abExecutable exen/a
TrickBot
2021-06-22 22:58:16bdd0feb2f139e72bfdf20ba54df4a276Executable exen/a
TrickBot
2021-06-22 20:54:5697c9f2eefac68f1a5505d614161f93c8Executable exen/a
TrickBot
2021-06-02 17:42:46e4d1a750035fe0b45be043fed1a711d4Executable exen/a
n/a
2021-06-01 15:21:596aa7925f6d03c57b8b7ff2a05f6f06bbExecutable exeVirustotal results 33.33%
TrickBot
2021-05-28 07:31:17582671a5b5f2170a49333296aa81b84bDLL dllVirustotal results 13.64%
n/a
2021-05-24 17:05:16a915d76c4494efea9c6b39250604d7c5Executable exeVirustotal results 11.59%
TrickBot
2021-05-21 05:20:07775ef35679b84c2aaa2ba3d870af1762Executable exeVirustotal results 58.21%
TrickBot