Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 66.85.156.81. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:66.85.156.81
Hostname:neemails.xyz
Status:Offline
Spamhaus SBL:Not listed
Malware:TrickBot
AS number:AS20454
AS name:SSASN2 - SECURED SERVERS LLC
Country:- US
First seen:2019-10-17 10:06:52 UTC
Last seen:2019-10-20 18:24:03 UTC
Last online:2019-10-21

Malware Samples


The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-10-21 16:46:155e0303742e801bb71ba15f5895acbe8cVirustotal results 5 / 71 (7.04%) 66.85.156.81447TrickBot
2019-10-21 10:13:54483871baecd970169cd810ca88f25867Virustotal results 12 / 70 (17.14%) 66.85.156.81447TrickBot
2019-10-20 18:31:4342cf16e2d6c02343fccb940bcfce9c88Virustotal results 52/69 (75.36%) 66.85.156.81447TrickBot
2019-10-20 06:42:02137d3775437310811769f4a293c2a777n/a66.85.156.81447TrickBot
2019-10-20 00:58:58e85b9da5f11ab177afc386567ce34b2an/a66.85.156.81447TrickBot
2019-10-20 00:52:15b7a05b925a3ecfca66bdb89e46834e88Virustotal results 53/70 (75.71%) 66.85.156.81447TrickBot
2019-10-19 23:50:14aa63a32b5701438d7a6e49399024f844Virustotal results 50/70 (71.43%) 66.85.156.81447TrickBot
2019-10-19 13:07:40c1caea10ba23bf73bd9483b5b59488bbn/a66.85.156.81447TrickBot
2019-10-17 13:31:36ad69b3a0d0031796cfde33a21edcd772Virustotal results 50/70 (71.43%) 66.85.156.81447TrickBot
2019-10-17 10:17:4828d58f0c818d31e9a11931b05f51904en/a66.85.156.81447TrickBot

# of malware samples: 10