Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 185.99.2.168. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:185.99.2.168
Hostname:rocket.cyberlike.org
Status:Offline
Spamhaus SBL:Not listed
Malware:TrickBot
AS number:AS200698
AS name:GLOBALHOST-BOSNIA-AS
Country:- BA
First seen:2019-12-20 21:10:32 UTC
Last seen:2019-12-22 11:28:50 UTC
Last online:2019-12-23

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-12-22 14:57:3413c65358d143d0b7c404778dd8c6adaeVirustotal results 38 / 72 (52.78%) 185.99.2.168447TrickBot
2019-12-22 12:12:4337ba325b2193800572fce59dee7b49a0Virustotal results 33 / 70 (47.14%) 185.99.2.168447TrickBot
2019-12-22 12:12:4337ba325b2193800572fce59dee7b49a0Virustotal results 33 / 70 (47.14%) 185.99.2.168447TrickBot
2019-12-21 18:19:34e60188a78b83a9af9741f6b74562a7b3Virustotal results 45 / 72 (62.50%) 185.99.2.168447TrickBot
2019-12-21 17:46:42a2ee03bb36e23284dc14faaebf86b682Virustotal results 46 / 73 (63.01%) 185.99.2.168447TrickBot
2019-12-21 17:23:56dafc8916bac5488a9ce9e64f50399aa5n/a185.99.2.168447TrickBot
2019-12-21 17:23:56dafc8916bac5488a9ce9e64f50399aa5n/a185.99.2.168447TrickBot
2019-12-21 17:19:32848ce4a4b8e9bc29c28cad920526e808Virustotal results 46 / 72 (63.89%) 185.99.2.168447TrickBot
2019-12-21 17:19:32848ce4a4b8e9bc29c28cad920526e808Virustotal results 46 / 72 (63.89%) 185.99.2.168447TrickBot
2019-12-21 12:46:03f73dfc1b6a293c6d8ba3069e80c86a7fVirustotal results 13 / 72 (18.06%) 185.99.2.168447TrickBot
2019-12-21 12:46:03f73dfc1b6a293c6d8ba3069e80c86a7fVirustotal results 13 / 72 (18.06%) 185.99.2.168447TrickBot
2019-12-20 21:24:338c053bbc376afc1c48862c4283d52ff4Virustotal results 43 / 72 (59.72%) 185.99.2.168447TrickBot

# of malware samples: 12