Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 198.46.198.131. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:198.46.198.131
Hostname:198-46-198-131-host.colocrossing.com
Status:Offline
Spamhaus SBL:SBL457734
Malware:TrickBot
AS number:AS36352
AS name:AS-COLOCROSSING - ColoCrossing
Country:- US
First seen:2019-08-19 18:11:54 UTC
Last seen:2019-08-19 18:11:54 UTC
Last online:2019-08-20

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-08-22 04:10:307bcf93be4e1176d408a85206753d670aVirustotal results 45/69 (65.22%) 198.46.198.131447TrickBot
2019-08-19 19:20:432b70cd75211b74efbe8aa536dc8f69f8Virustotal results 51/69 (73.91%) 198.46.198.131447TrickBot

# of malware samples: 2