Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 198.46.161.216. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:198.46.161.216
Hostname:198-46-161-216-host.colocrossing.com
Status:Offline
Spamhaus SBL:Not listed
Malware:TrickBot
AS number:AS36352
AS name:AS-COLOCROSSING - ColoCrossing
Country:- US
First seen:2019-12-12 23:33:20 UTC
Last seen:2019-12-18 07:28:22 UTC
Last online:2019-12-19

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-12-18 07:41:49f671c41aa3f4b97959b3b7174e5ae820n/a198.46.161.216447TrickBot
2019-12-17 19:54:1474d634053bd08616f81075d3725dab48n/a198.46.161.216447TrickBot
2019-12-17 18:17:101a62459bebfcd1d2085f0dc079881e4bn/a198.46.161.216447TrickBot
2019-12-17 09:48:19dd8e645ad10e29d00956b25c7cd5ca90n/a198.46.161.216447TrickBot
2019-12-16 20:12:54124c193708b443ec5123e6929ddef3a7n/a198.46.161.216447TrickBot
2019-12-16 19:03:53a6d980a1ca1f0e674cac6fb2e4e039a9Virustotal results 39 / 72 (54.17%) 198.46.161.216447TrickBot
2019-12-13 09:56:41f6435e7b1166ff93ee491656d8856cb0n/a198.46.161.216447TrickBot
2019-12-12 23:49:42d116cd6eb486aedbed86b91c3e4684can/a198.46.161.216447TrickBot
2019-12-12 23:44:55621e8944859c4c1c42ce5d7be0a26caen/a198.46.161.216447TrickBot

# of malware samples: 9