Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 149.56.106.83 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	149.56.106.83
Hostname:	ns525731.ip-149-56-106.net
AS number:	AS16276
AS name:	OVH
Country:	CA
First seen:	2021-12-01 17:08:46 UTC
Last online:	2021-12-04 18:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 149.56.106.83. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-12-04 17:01:50	b3f8ed41e57027ad5fb4b6eb96432690	dll	64.52%	Dridex
2021-12-04 13:25:11	cf23b4c59c8861d4b789c8a2b97ea454	dll	63.08%	Dridex
2021-12-04 13:18:39	29beff176c37a31cb167148bd102c359	dll	28.12%	Dridex
2021-12-04 13:18:30	7b213d794b67e1afd970f5ad6b01b1b6	dll	62.12%	n/a
2021-12-04 10:08:13	e722a57b6a3beea22108f23b36b90343	dll	62.69%	Dridex
2021-12-04 05:35:32	56a65560007742ec7cb02482e6bf161a	dll	25.00%	n/a
2021-12-04 05:35:23	dd8816152e74478c48e5780a992d6acb	dll	26.15%	n/a
2021-12-04 05:29:35	166d1c7e2a67a64c72e4a637a6510a83	dll	26.15%	n/a
2021-12-04 05:29:22	6d950336106456dc12ef79e2172e1efa	dll	60.00%	n/a
2021-12-04 01:43:22	688eb85625b25b14634cdce119ae56a7	dll	26.56%	n/a
2021-12-04 01:43:12	f56e9a99b4f43def41081d7614a75b2f	dll	25.00%	n/a
2021-12-04 01:36:55	09d804fa065c96d21ac5e70bd115be72	dll	27.42%	n/a
2021-12-04 01:36:49	14d52f7098a6dfc11d10e9667c048807	dll	26.56%	n/a
2021-12-04 01:36:39	d06fa7d8ee96ea5afd7f457a12ce6687	dll	26.56%	n/a
2021-12-04 01:36:29	92cd02f630a8576c9ee0e96bc8286c18	dll	26.98%	n/a
2021-12-04 01:36:21	0abb8efc304db6254d9da6a45d031a8f	dll	26.56%	n/a
2021-12-04 01:36:13	260a4116343f1c1bbd124a74e63f205a	dll	25.81%	n/a
2021-12-04 01:36:02	dc55722c74930fa9588d1cc6baec5d44	dll	26.15%	n/a
2021-12-03 18:05:42	7b0928f7168c96f91db6c452ce5367f0	dll	25.81%	n/a
2021-12-03 11:02:50	d8d0f6ba511c4e59a8a74f95637833d9	dll	26.23%	Dridex
2021-12-03 11:02:43	b3e06fffaf8168fea8172a799556a1fe	dll	24.59%	Dridex
2021-12-03 06:52:30	cc056390140a8bf84571a331c4daeae2	dll	26.56%	Dridex
2021-12-03 06:52:19	2c11b328ef4865357480324b6558f5db	dll	25.00%	Dridex
2021-12-03 02:59:13	65e23ae3d2527c63730144b6b42cd566	dll	26.56%	n/a
2021-12-03 02:48:53	201c704de658714184ba076c561a1090	dll	26.56%	n/a
2021-12-03 02:48:46	e438586f20f9ef4a3f21e358de6f95a4	dll	25.40%	n/a
2021-12-02 11:58:07	6a518959e0f470f1bdfa63a321f5f6a2	dll	26.56%	Dridex
2021-12-02 11:57:59	f3a26f77233afae9053fe2f1b45781c6	dll	26.15%	Dridex
2021-12-02 11:42:33	0c2331bee75bc343dd9fe3de21c1b406	dll	26.56%	Dridex
2021-12-02 00:31:25	5113cb32bfcc1ddffa037dadeb548f73	dll	26.15%	n/a
2021-12-01 17:38:07	eb39371022df0d82eda54d23dffb91f7	dll	22.22%	n/a
2021-12-01 17:38:03	e8786f5742e4663b19b35abc924830fa	dll	24.24%	n/a
2021-12-01 17:37:58	60cffd06e39bc2c2f5fa35ac30ab6e43	dll	23.44%	n/a
2021-12-01 17:04:47	38cfbf7a735ea8ebb83d72da34f1ca6c	dll	25.00%	n/a
2021-12-01 17:03:27	686c09a3b5839670a0f0cd653c6cdafc	dll	25.00%	n/a
2021-12-01 17:00:57	973ecc4cca5b8f3bad208963d12d224f	dll	24.19%	n/a