Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 212.109.195.100. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:212.109.195.100
Hostname:smisho.qh
Status:Offline
Spamhaus SBL:Not listed
Malware:TrickBot
AS number:AS29182
AS name:THEFIRST-AS
Country:- RU
First seen:2020-01-28 19:07:30 UTC
Last seen:2020-01-28 19:07:30 UTC
Last online:2020-01-29

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-01-31 12:19:19a4ecd711793c419f60991400512662d2Virustotal results 32 / 73 (43.84%) 212.109.195.100447TrickBot
2020-01-31 03:47:3416513e5ec863bade24bf0dc765bafd1fn/a212.109.195.100447TrickBot
2020-01-31 01:35:4846210ab41b0603a621e3052e73c2f0a1n/a212.109.195.100447TrickBot
2020-01-31 00:43:42931bc687241779d40bcf491de0e37b92n/a212.109.195.100447TrickBot
2020-01-30 08:23:31b1f1d81a0f72b9b9e467077fac590026Virustotal results 44 / 72 (61.11%) 212.109.195.100447TrickBot
2020-01-29 07:01:56a2efec05392e3d41eacc0763c3a0be46Virustotal results 41 / 72 (56.94%) 212.109.195.100447TrickBot
2020-01-29 05:14:3959bb29ceab90137b8ebc235e3033f863n/a212.109.195.100447TrickBot
2020-01-29 03:26:28af0679074bae304d80f8f300ab8bc003n/a212.109.195.100447TrickBot
2020-01-29 02:34:237eb1257bcc30b8af6db3770f9c3faee8n/a212.109.195.100447TrickBot
2020-01-29 02:27:1454a913b3d162a7ad6744bec6d5f51245n/a212.109.195.100447TrickBot
2020-01-29 01:55:53ef1e546d317976dc997573fc25e2f990n/a212.109.195.100447TrickBot
2020-01-28 21:16:38cbab562262a13b6add748fbca67eae0fVirustotal results 42 / 71 (59.15%) 212.109.195.100447TrickBot
2020-01-28 19:54:406bd10b7e3c41fcc15983fb44d492bc46n/a212.109.195.100447TrickBot
2020-01-28 19:29:33521def74a1ed6698d3ec93999231b34dn/a212.109.195.100447TrickBot

# of malware samples: 14