Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 47.145.130.171 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:47.145.130.171
Hostname:n/a
AS number:AS5650
AS name:FRONTIER-FRTR
Country:- US
First seen:2022-03-17 16:23:13 UTC
Last online:2022-08-04 23:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2022-03-17 16:23:1347.145.130.171443
QakBot
Offline
Yes (2022-03-17 16:25:03 UTC)2022-08-04 23:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 47.145.130.171. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2022-07-15 23:37:492fce945f0621e3812618f55c4a3926e9DLL dllVirustotal results 64.71%
n/a
2022-07-15 23:34:58926382093a313282f4a1639944f3fb0cDLL dllVirustotal results 60.87%
n/a
2022-07-15 14:26:3296eb0292ad176c905613678a3125cca5DLL dlln/a
n/a
2022-07-14 21:44:5990c7b8f66c18c1e7b06ebd9c8a7f731dDLL dllVirustotal results 44.12%
n/a
2022-07-14 21:44:29a8c071f4d69627f581fa15495218bff7DLL dlln/a
n/a
2022-07-14 18:34:311fffb3fdb0a4b780385cc5963fd4d40cDLL dlln/a
n/a
2022-07-13 23:34:11a0d132cdc67c29abf79ecf455c4a4e25msiVirustotal results 14.75%
n/a
2022-07-12 18:08:5847847ac5f01e037c1a18becc0dfd4611msin/a
n/a
2022-03-21 16:55:2848116c4d8cf74403229148ca85fe2317DLL dlln/a
n/a
2022-03-21 16:23:365e02b05ef7da25224f273e6d016b0774DLL dlln/a
n/a
2022-03-15 13:09:356e2450029d97dea2629de57bb792847dDLL dlln/a
Quakbot
2022-03-15 13:09:02f6cf8d0dc990f0e73ca71bb91c68e35fDLL dlln/a
Quakbot
2022-03-15 13:08:14d424ca5445f8b5ca64fc0b306ce948ebDLL dlln/a
Quakbot
2022-03-15 13:07:21906e7e7182eef7c85a0d3ebe8283ae36DLL dlln/a
Quakbot