Empty datasets | Our Feodo Tracker datasets are currently empty. Read this to learn why.

Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 89.107.190.111 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:89.107.190.111
Hostname:mail.29420.whserv.de
AS number:AS12843
AS name:TELEMAXX
Country:- DE
First seen:2021-10-31 21:07:23 UTC
Last online:2021-11-19 13:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2021-10-31 21:07:2389.107.190.1116225
Dridex
Offline
Yes (2021-11-25 15:41:31 UTC)2021-11-19 13:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 89.107.190.111. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2021-11-19 20:51:362067b44ccad96af56aa112fed01734faExecutable exeVirustotal results 68.12%
Dridex
2021-11-15 08:58:561b0bf0729f7b687da13942abab87010bExecutable exeVirustotal results 70.59%
Dridex
2021-11-04 02:50:12ae513576bf0c8e420b983302856efd7bExecutable exeVirustotal results 62.32%
n/a
2021-11-03 20:44:04b0819c93ccf48fcd43bdb79acaaa108fExecutable exeVirustotal results 60.94%
Dridex
2021-10-31 15:24:007ca44627fd39098da79c0a7a9a433a6cExecutable exeVirustotal results 66.67%
Dridex