Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 91.121.134.180 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:91.121.134.180
Hostname:ns3057693.ip-91-121-134.eu
AS number:AS16276
AS name:OVH
Country:- FR
First seen:2021-10-31 21:07:23 UTC
Last online:2021-11-19 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2021-10-31 21:07:2391.121.134.18010172
Dridex
Online
Yes (2021-11-25 15:34:09 UTC)2021-11-19 13:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 91.121.134.180. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-11-19 20:51:362067b44ccad96af56aa112fed01734faExecutable exeVirustotal results 68.12%
Dridex
2021-11-15 08:58:561b0bf0729f7b687da13942abab87010bExecutable exeVirustotal results 70.59%
Dridex
2021-11-04 02:50:12ae513576bf0c8e420b983302856efd7bExecutable exeVirustotal results 62.32%
n/a
2021-11-03 20:44:04b0819c93ccf48fcd43bdb79acaaa108fExecutable exeVirustotal results 60.94%
Dridex
2021-10-31 15:24:007ca44627fd39098da79c0a7a9a433a6cExecutable exeVirustotal results 66.67%
Dridex