Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 82.125.44.236 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:82.125.44.236
Hostname:lfbn-poi-1-708-236.w82-125.abo.wanadoo.fr
AS number:AS3215
AS name:France Telecom - Orange
Country:- FR
First seen:2023-05-30 06:20:54 UTC
Last online:2023-06-21 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2023-05-30 06:20:5482.125.44.2362222
QakBot
Offline
Yes (2023-05-30 06:25:03 UTC)2023-06-21 13:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 82.125.44.236. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-06-21 13:51:5811af091b43a7b07b74ae94c0b4ecba27jsVirustotal results 0.00%
n/a
2023-06-21 13:43:12fba31d708b9e34aa0b74f6fba7658d4bjsVirustotal results 1.72%
n/a
2023-06-21 13:43:08d9d0fcdb350260108471399412e5a985zipVirustotal results 1.61%
n/a
2023-06-15 09:20:1086d04c23e01dee18584a919472874806jsVirustotal results 5.08%
n/a
2023-06-14 16:34:184b773a0dcdedffe32ed1ce4ca68c9092jsVirustotal results 1.69%
n/a
2023-06-14 16:34:11051ca5b22662dc01d89022625def3327zipn/a
n/a
2023-06-01 16:47:431ddfcbdbe07f551e561be159a73d1c99msin/a
n/a
2023-06-01 15:41:26e381e9903abc3b3c725c53838467a257msin/a
n/a
2023-06-01 15:41:21a657553449746c482dacfe3b19119b7ajsVirustotal results 0.00%
n/a
2023-06-01 15:41:177db0f9f78fdb463ecb70ed9220168db3zipn/a
n/a
2023-05-30 20:45:59ab8ef3423324168d06b2d122f75ca130msiVirustotal results 3.77%
n/a
2023-05-30 20:45:54e35727b10193fe55df216a1f9d166997msiVirustotal results 5.00%
n/a
2023-05-30 15:54:44665afc8f8b7972f427fe1bd90d263032msin/a
n/a
2023-05-26 22:42:1437f56794fcc202b0568d6005de64fe12jsVirustotal results 6.78%
Quakbot
2023-05-26 20:38:5284f60d908dc7e65d585d1f1e51a1c211msiVirustotal results 3.33%
Quakbot