Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 200.90.68.166 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:200.90.68.166
Hostname:200.90.68-166.dyn.dsl.cantv.net
AS number:AS8048
AS name:CANTV Servicios, Venezuela
Country:- VE
First seen:2023-04-25 11:00:57 UTC
Last online:2023-04-25 15:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2023-04-25 11:00:57200.90.68.1662222
QakBot
Offline
Yes (2023-04-25 11:05:06 UTC)2023-04-25 15:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 200.90.68.166. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-05-04 02:36:48db8ec43b95b4c447264aea3d1fd8bf42DLL dlln/a
Quakbot
2023-05-03 21:36:08b8fc07d2dcdb9563cd30e23bfe666434DLL dllVirustotal results 45.59%
Quakbot
2023-05-03 21:24:41f42df5ad1893da50104422dcfa153729DLL dllVirustotal results 64.71%
Quakbot
2023-04-28 13:27:476275ea148e2c58843a040503a41732f5DLL dlln/a
Quakbot
2023-04-28 03:36:43db419fe40bd816f6ed6e6e4c03716042DLL dlln/a
Quakbot
2023-04-26 07:01:40ffe37adf4e8b07f38694f40ecb129f88DLL dlln/a
Quakbot
2023-04-26 04:51:3317fc80b899347f84d5278321e7668d6cDLL dllVirustotal results 31.43%
Quakbot
2023-04-26 04:48:35f4f1420a2a5e5099018c103bab2ea8cewsfn/a
Quakbot