Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 185.161.211.185. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:185.161.211.185
Hostname:hi1arious.ru
Status:Offline
Spamhaus SBL:SBL452107
Malware:TrickBot
AS number:AS50673
AS name:SERVERIUS-AS
Country:- NL
First seen:2019-06-23 01:51:57 UTC
Last seen:2019-06-26 12:22:33 UTC
Last online:2019-06-26

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-06-26 12:34:09235155c55296114f643ccd1683550ee3Virustotal results 47/71 (66.20%) 185.161.211.185447TrickBot
2019-06-26 08:06:3431ae5ada3347730eca7b2545ed97452fVirustotal results 53/71 (74.65%) 185.161.211.185447TrickBot
2019-06-26 08:06:3431ae5ada3347730eca7b2545ed97452fVirustotal results 53/71 (74.65%) 185.161.211.185447TrickBot
2019-04-10 14:38:475a081a98675be5dac13ec0f64c943d01Virustotal results 36/65 (55.38%) 185.161.211.185447Smoke Loader

# of malware samples: 4