Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:
AS number:AS9891
AS name:CSLOX-IDC-AS-AP CS LOXINFO Public Company Limited.
Country:- TH
First seen:2022-11-02 19:05:38 UTC
Last online:2023-04-03 15:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2022-11-02 19:05:3827.254.65.1148080
Yes (2022-11-02 19:10:04 UTC)2023-04-03 15:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-03-14 22:07:081ce04ba9083a7e2deb2cc894682c083cDLL dllVirustotal results 7.94%
2023-03-14 13:46:443a03282ee2db20a8f0ff75a634a98b58DLL dllVirustotal results 7.94%
2023-03-09 12:34:121fb94ed66ed9705b325e0367ebf3e20eDLL dlln/a
2023-03-09 11:44:489646fa8b8fa1aa6be170b81a0046841bDLL dllVirustotal results 1.69%