Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 72.27.15.168 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	72.27.15.168
Hostname:	168-15-27-72-br1-DYNAMIC-dsl.cwjamaica.com
AS number:	AS30689
AS name:	FLOW-NET
Country:	JM
First seen:	2022-04-14 15:31:17 UTC
Last online:	2022-04-18 17:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 72.27.15.168. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2022-04-19 09:23:57	5c02722f52a4e451176fe1887883983c	dll	n/a	n/a
2022-04-19 02:22:47	fe61080715e97b623082d86305828bd2	dll	10.14%	n/a
2022-04-18 21:16:01	0abd8a9bf1f0569568be943247941e60	dll	n/a	n/a
2022-04-18 21:15:14	527b8c21310724b075d741bb22137936	dll	n/a	n/a
2022-04-18 17:55:49	09f71e7d509184ef6babe6a2463f7bfd	dll	n/a	n/a
2022-04-18 16:41:47	c867e2db5895d61bc1eedcc4bca8eac6	dll	n/a	n/a
2022-04-18 16:41:34	5cbda1468e0679bf46f3494ff5a248ef	dll	n/a	n/a
2022-04-18 16:41:21	4b16bd9c1043af55800ba004e2deaa61	dll	n/a	n/a
2022-04-18 15:27:37	ce10f105e84ee24e97dccfaea62bc580	dll	n/a	n/a
2022-04-18 14:52:22	04f35d0fa4fb11681b46fa7880eeccae	dll	n/a	n/a
2022-04-14 16:28:10	49d5b1b592428122ea9ee797af0c5baf	dll	21.74%	n/a
2022-04-14 16:18:19	9d0b8d924a2f02f79d18094220e1ad38	msi	14.75%	n/a
2022-04-14 15:13:48	75bf648ffcdf9fef945fb09384dc2be0	dll	23.19%	Quakbot