Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 217.165.239.223 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:217.165.239.223
Hostname:bba-217-165-239-223.alshamil.net.ae
AS number:AS5384
AS name:EMIRATES-INTERNET Emirates Internet
Country:- AE
First seen:2023-04-25 11:00:53 UTC
Last online:2023-04-27 14:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2023-04-25 11:00:53217.165.239.223443
QakBot
Offline
Yes (2023-04-25 11:05:03 UTC)2023-04-27 14:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 217.165.239.223. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-05-05 02:31:20f76a6a0ec066414917441b400a3e837dDLL dlln/a
Quakbot
2023-05-03 20:55:1904a113bf42c2de91d104f5ac8adeb79fDLL dllVirustotal results 49.28%
Quakbot
2023-04-29 01:56:196295170171ea48eb12be6dd17631c16cDLL dlln/a
Quakbot
2023-04-28 18:21:22896fc1755320526367ec22e76284b367DLL dllVirustotal results 45.71%
Quakbot
2023-04-28 13:44:463c32bc9d3d35f9764d43f02a52dd56b0DLL dlln/a
Quakbot
2023-04-28 03:36:43db419fe40bd816f6ed6e6e4c03716042DLL dlln/a
Quakbot
2023-04-27 06:43:17b0d50126f78b2a93be9a26a66204dfcfDLL dlln/a
Quakbot
2023-04-27 05:31:013d46c255fd15db3c90c08085af455b7bDLL dllVirustotal results 45.71%
Quakbot
2023-04-26 07:01:5699813b65f8dc4ad16c091efe9efbb095DLL dlln/a
Quakbot
2023-04-26 07:01:398817adedd6b5c1bb1c402d5e0a9aef12DLL dlln/a
Quakbot
2023-04-26 07:01:37ad7ed54954493b124eb1be5987f72844DLL dlln/a
Quakbot
2023-04-25 17:53:054113904ae8ac8f43a521c10a870bcb60wsfn/a
Quakbot
2023-04-25 16:43:14f407bf95cd406c34b2d4c463a59faf0aDLL dlln/a
Quakbot