Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 163.172.50.82 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:163.172.50.82
Hostname:163-172-50-82.rev.poneytelecom.eu
AS number:AS12876
AS name:Online SAS
Country:- FR
First seen:2021-09-29 16:00:42 UTC
Last online:2021-12-04 12:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse compltain sent?Last online (UTC)
2021-11-16 12:57:47163.172.50.82443
Emotet
Offline
Yes (2021-11-25 15:42:50 UTC)2021-12-04 12:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 163.172.50.82. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-11-20 16:39:1547bd1aa0c5609d40fa979ecb7b82a1faDLL dllVirustotal results 31.82%
Heodo
2021-11-16 19:49:13f6cfd1855ac4d61666f10e9c3601418bDLL dlln/a
Heodo
2021-11-16 04:41:37e761c8a3f14e444ec2dd12515d824afcDLL dlln/a
Heodo
2021-11-16 02:52:57da02885e0b8cab798719b0e2c3ff7855DLL dlln/a
Heodo
2021-11-16 01:20:29dd949ed0d0e4d712fb482aacc7a0a0a9DLL dlln/a
Heodo
2021-11-16 00:09:20e87598bd85064bb73ea224769c00bbc1DLL dlln/a
Heodo
2021-11-15 23:33:49e61d78599a2362f9eeb4994d0acbb4e4DLL dlln/a
Heodo
2021-11-15 22:54:10dc9cf0ab9300de1ddb41eabd82b20168DLL dlln/a
Heodo
2021-09-29 15:50:32b42f681931852a788ed814dcf741df48DLL dllVirustotal results 20.00%
Dridex
2021-09-29 15:49:28b3941573c6d1965c44e94f5f7feba29fWord file xlsxn/a
Dridex