Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 51.79.166.3 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	51.79.166.3
Hostname:	vps-66c10039.vps.ovh.ca
AS number:	AS16276
AS name:	OVH
Country:	SG
First seen:	2021-11-03 16:34:11 UTC
Last online:	2023-11-06 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2021-11-03 16:34:11	51.79.166.3	443	Dridex	Offline	Yes (2023-11-02 13:15:03 UTC)	2023-11-06 13:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 51.79.166.3. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-11-03 18:25:40	8c0dd477d87cd942bff645cc95254646	dll	22.39%	n/a
2021-11-03 18:25:38	5b653ef9db2b1c9d597cebb2fc29c39d	dll	25.37%	n/a
2021-11-03 18:25:37	4fe881d6f4f13d6509aafdfb80c66d32	dll	24.24%	n/a
2021-11-03 18:25:35	4d663e29157024edecb438268eca5b0f	dll	25.37%	n/a
2021-11-03 18:25:34	d3b6b5d4209ae7ba5a0818c20573dfb8	dll	23.88%	n/a
2021-11-03 18:25:31	c9ff4d79afdd0061ec608dc295897ffa	dll	25.76%	n/a
2021-11-03 18:25:28	e44025fdc31cdce162ed7573b6c501f5	dll	21.21%	n/a
2021-11-03 17:10:46	652f27e9ed61e47beb4199d5586c2c0c	dll	22.73%	n/a
2021-11-03 17:10:38	4249e5b55da36b0b2e931087f5457d98	dll	24.62%	Dridex
2021-11-03 16:58:11	3cd5379c716909baf6725bd35b128636	dll	22.39%	n/a
2021-11-03 16:17:17	9d2e090fdf02bee268f056721b0a616c	dll	24.24%	n/a
2021-11-03 16:17:11	518e1933ece4d957ebe050645750bf40	dll	23.88%	n/a