Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 70.121.198.103 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	70.121.198.103
Hostname:	cpe-70-121-198-103.satx.res.rr.com
AS number:	AS11427
AS name:	TWC-11427-TEXAS
Country:	US
First seen:	2022-11-15 14:41:04 UTC
Last online:	2023-06-01 15:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 70.121.198.103. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-03-16 17:50:32	7555576d5752d18e33dba37be01669cd	xll	33.33%	n/a
2023-03-15 15:41:38	67ead5069eca24d3705c4bf7811f9558	js	n/a	n/a
2023-03-15 12:06:25	709e034c433dd371d3bb96d80b67a789	dll	n/a	n/a
2023-03-15 02:37:17	16fbffe8e8da6f6ee2e8ca5fa73b7d1e	xll	n/a	n/a
2023-03-14 17:34:44	ff58f9cf0740aead678d9e36c0782894	dll	14.49%	n/a
2023-03-14 17:28:23	e09a3bac10565ee80cbdb7a4b1a5d2af	xll	11.59%	n/a
2023-03-14 17:16:56	35825efb8c006f5a369710852b11230b	dll	11.59%	n/a
2022-11-22 12:50:26	869298ad11789b37cdd6842a2943055d	dll	54.93%	Quakbot
2022-11-18 06:26:09	7d3c7803b0c08b9c23a918fe9bf1ac6c	dll	45.71%	n/a
2022-11-16 17:53:56	49f7cc6de9d7f780ba451cf87d7be0a4	dll	n/a	n/a
2022-11-16 17:53:29	3c6ba9a7f027b4ed21eb1a21be72fe62	zip	n/a	n/a
2022-11-15 17:36:17	abaa365524d101596b48a1f515ec4f09	dll	n/a	Quakbot
2022-11-15 17:07:42	e225360c7255f6be08be45b432a26f51	dll	n/a	n/a
2022-11-15 17:07:12	57438fd055c4e88acf02f5782b74ae86	dll	n/a	Quakbot
2022-11-15 15:58:48	cb46d68b31c8773c74435bfd25c4c9bc	dll	n/a	n/a
2022-11-15 12:38:04	cab39f756b7ab98d799939819a248b54	dll	14.08%	Quakbot
2022-11-15 12:37:44	533588ac7065340fde23cd1865c50085	zip	n/a	Quakbot