Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 75.109.111.89 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	75.109.111.89
Hostname:	n/a
AS number:	AS19108
AS name:	SUDDENLINK-COMMUNICATIONS
Country:	US
First seen:	2023-04-05 12:32:03 UTC
Last online:	2023-08-25 23:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2023-04-05 12:32:03	75.109.111.89	443	QakBot	Offline	Yes (2023-04-05 12:35:03 UTC)	2023-08-25 23:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 75.109.111.89. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-06-23 18:08:59	13fa63c2f9161d90b05df90f4b92bb76	dll	n/a	Quakbot
2023-06-21 13:51:58	11af091b43a7b07b74ae94c0b4ecba27	js	0.00%	n/a
2023-06-21 13:43:12	fba31d708b9e34aa0b74f6fba7658d4b	js	1.72%	n/a
2023-06-21 13:43:08	d9d0fcdb350260108471399412e5a985	zip	1.61%	n/a
2023-06-20 17:13:37	6679a7d280f6a067a8c04f6fbaf1d253	js	5.08%	n/a
2023-06-14 16:12:53	15ed589908a80c2e8db14f6ad850e881	exe	27.14%	n/a
2023-06-13 21:54:28	da4efeb418c52587b3ce73de87c38386	dll	67.14%	Quakbot
2023-06-01 16:47:43	1ddfcbdbe07f551e561be159a73d1c99	msi	n/a	n/a
2023-06-01 15:41:26	e381e9903abc3b3c725c53838467a257	msi	n/a	n/a
2023-06-01 15:41:21	a657553449746c482dacfe3b19119b7a	js	n/a	n/a
2023-06-01 15:41:17	7db0f9f78fdb463ecb70ed9220168db3	zip	n/a	n/a
2023-05-30 20:45:59	ab8ef3423324168d06b2d122f75ca130	msi	3.77%	n/a
2023-05-30 20:45:54	e35727b10193fe55df216a1f9d166997	msi	5.00%	n/a
2023-05-30 15:54:44	665afc8f8b7972f427fe1bd90d263032	msi	n/a	n/a
2023-05-08 05:37:38	83a4b8d09958d03b1a415ec53141cbd8	dll	66.67%	Quakbot
2023-04-28 22:14:00	3b3a554e731ac5a2273ddf6408156085	dll	n/a	Quakbot
2023-04-28 02:22:34	c64fb7f7b3b9bca62896e2476726825d	dll	58.57%	Quakbot
2023-04-27 08:41:57	1ed7ce8af6a4e19a6e35d24878c30237	dll	57.14%	Quakbot
2023-04-23 14:59:03	5417a8efadc0701862b1ce8c51d8436b	dll	54.00%	Quakbot
2023-04-23 14:58:52	92f9f5d70681e0f2ab33c5889e24ec99	dll	60.29%	Quakbot
2023-04-20 16:28:32	45f241fd144ec617a7610cb4edc51f30	dll	21.31%	n/a
2023-04-15 15:13:15	18074fd455d5eebce222d6e21d46868f	dll	n/a	Quakbot
2023-04-10 05:51:21	7aff0cafdaabdc2f24b49075416abe1e	dll	64.18%	Quakbot
2023-04-06 09:23:49	32c1a59b82cad64ad3a83d9d891d5919	dll	n/a	Quakbot