Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 185.117.72.140. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:185.117.72.140
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL352624
Malware:TrickBot
AS number:AS60117
AS name:HS
Country:- NL
First seen:2019-06-12 08:29:03 UTC
Last seen:2019-06-15 23:52:03 UTC
Last online:2019-06-16

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-06-16 00:06:39075a2bda898c9487dd17fee2baa57eabVirustotal results 45/70 (64.29%) 185.117.72.140443TrickBot
2019-06-15 23:38:54ce698372575f3164dd9aa1630e89e5e6Virustotal results 48/69 (69.57%) 185.117.72.140443TrickBot
2019-06-15 23:38:54ce698372575f3164dd9aa1630e89e5e6Virustotal results 48/69 (69.57%) 185.117.72.140443TrickBot
2019-06-15 08:49:264057b2ce0550d8dff04ab428488d668cVirustotal results 17/71 (23.94%) 185.117.72.140443TrickBot
2019-06-14 08:21:207d415c7456b5dbee79e40bfe256bf7c5Virustotal results 30/71 (42.25%) 185.117.72.140443TrickBot
2019-06-14 08:16:2688221227414ddbb7ed6d0519db227c5eVirustotal results 9/69 (13.04%) 185.117.72.140443TrickBot
2019-06-13 13:57:510fa0c15b99bb8adc29670f37da04a5c8Virustotal results 50/72 (69.44%) 185.117.72.140443TrickBot

# of malware samples: 7