Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 89.114.140.100 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


IP address:89.114.140.100
Hostname:100.140.114.89.rev.vodafone.pt
AS number:AS12353
AS name:VODAFONE-PT Vodafone Portugal
Country:- PT
First seen:2023-04-26 14:01:15 UTC
Last online:2023-08-11 17:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)IP addressPortMalwareStatusAbuse complaint sent?Last online (UTC)
2023-04-26 14:01:1589.114.140.100443
QakBot
Offline
Yes (2023-04-26 14:05:06 UTC)2023-08-11 17:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 89.114.140.100. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)MD5 hashFile TypeVirustotalMalware
2023-06-21 13:51:5811af091b43a7b07b74ae94c0b4ecba27jsVirustotal results 0.00%
n/a
2023-06-21 13:43:12fba31d708b9e34aa0b74f6fba7658d4bjsVirustotal results 1.72%
n/a
2023-06-21 13:43:08d9d0fcdb350260108471399412e5a985zipVirustotal results 1.61%
n/a
2023-05-30 20:45:54e35727b10193fe55df216a1f9d166997msiVirustotal results 5.00%
n/a
2023-05-30 15:54:44665afc8f8b7972f427fe1bd90d263032msin/a
n/a
2023-05-03 21:46:55a612bafabb800e5c11d0a9b68c71b2c4DLL dllVirustotal results 57.97%
Quakbot
2023-05-03 21:11:25a2c91854b4e51c5dee9c6c71fe3fbff3DLL dllVirustotal results 49.28%
Quakbot
2023-04-30 04:03:30e09b213b68c559dbec562d3289620b24DLL dlln/a
Quakbot
2023-04-29 23:14:29545950802cb05c1630fde3a6b417a99dDLL dlln/a
Quakbot
2023-04-27 19:09:376924f56e801db0a071ddb0bde3785fc9DLL dllVirustotal results 31.43%
Quakbot
2023-04-27 05:24:0434e3105f963d85f818827c8212e2c074DLL dllVirustotal results 17.14%
Quakbot