Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 89.152.120.181 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	89.152.120.181
Hostname:	a89-152-120-181.cpe.netcabo.pt
AS number:	AS2860
AS name:	NOS_COMUNICACOES
Country:	PT
First seen:	2022-11-17 10:41:00 UTC
Last online:	2023-02-27 15:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

First seen (UTC)	IP address	Port	Malware	Status	Abuse complaint sent?	Last online (UTC)
2022-11-17 10:41:00	89.152.120.181	443	QakBot	Offline	Yes (2022-11-17 10:45:03 UTC)	2023-02-27 15:xx:xx

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 89.152.120.181. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2023-02-15 16:38:23	f4def11ae4014fbf7dec2e4563c572a1	dll	n/a	n/a
2023-02-15 15:25:13	c1a91d62c48fb71cbebdaf4011e6ae38	dll	n/a	n/a
2023-02-15 15:09:34	fec924486334002d6521953b921ec196	dll	n/a	n/a
2022-12-23 15:14:02	09581f5365d86d57fc010da3f5a18e51	zip	n/a	n/a
2022-12-20 18:33:56	a8b218070da1346c51e6abcb0728b827	iso	11.48%	n/a
2022-12-20 18:33:43	7fe7e2aa08f53fd222db8cf944d4788e	zip	n/a	n/a
2022-12-20 09:59:34	d77ce1693c7809bb5a38a6d2235545ae	dll	42.86%	n/a
2022-11-18 06:26:09	7d3c7803b0c08b9c23a918fe9bf1ac6c	dll	45.71%	n/a
2022-11-17 19:10:39	ba1953484c6e1a848e188f4fdf95546e	dll	n/a	n/a
2022-11-17 19:10:03	21ecde6d5a54c108416761b9bd4be47c	zip	n/a	Quakbot
2022-11-16 17:53:56	49f7cc6de9d7f780ba451cf87d7be0a4	dll	17.14%	Quakbot
2022-11-16 17:53:29	3c6ba9a7f027b4ed21eb1a21be72fe62	zip	0.00%	Quakbot