Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 203.173.94.162 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	203.173.94.162
Hostname:	n/a
AS number:	AS18059
AS name:	DTPNET-AS-AP DTPNET NAP
Country:	ID
First seen:	2021-11-06 11:32:39 UTC
Last online:	2022-03-01 23:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-11-06 11:32:39	203.173.94.162	443	TrickBot	Offline	Yes (2021-11-25 15:42:18 UTC)	2022-03-01 23:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 203.173.94.162. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-12-08 06:40:33	31ddbf1eb38130edb5c99ff63972383a	dll	31.82%	TrickBot
2021-11-21 23:19:27	f0174b3d9f6e002468edf6afb5931397	dll	n/a	TrickBot
2021-11-20 21:50:10	b623d1a7bc726dbe981f31a3e69c7613	dll	24.24%	TrickBot
2021-11-19 14:12:19	a11ffe9138e697e07a5c7ba3b1c6e2cd	exe	n/a	TrickBot
2021-11-19 08:02:46	139c97da5c3d13262997b93a201da984	exe	n/a	TrickBot
2021-11-19 05:47:58	5d88b65ed4b6d24a792f9ad881b7e521	exe	n/a	TrickBot
2021-11-18 11:33:02	79eb4d4890f256636ab9d1116a4f9994	exe	n/a	n/a
2021-11-16 14:53:33	b67fb56b6d51acac3b3cfa378e03cb5c	exe	n/a	TrickBot
2021-11-16 04:41:56	e8efe09c0f53f31a63220b1e56f15c89	exe	n/a	TrickBot
2021-11-10 12:06:11	e5df0d9bfb84529da95f7250ae8e86a7	dll	n/a	n/a
2021-11-09 16:21:24	edac740c24151b076b6c9cd6eea50bba	dll	n/a	TrickBot
2021-11-09 12:27:51	e4b10406e678017491a335efdd14a6d9	dll	n/a	n/a
2021-11-09 07:09:19	26e2a1af14f6d6ec279ec538cbfabfa0	dll	16.67%	n/a
2021-11-06 06:52:01	9d24afa888290339136acb905e3f1b56	exe	26.87%	TrickBot