Browse Botnet C&Cs

You are currently viewing the database entry for the TrickBot botnet command&control server (C&C) 94.156.35.206. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

Host:	94.156.35.206
Hostname:	v73624.vps-ag.com
Status:	Offline
Spamhaus SBL:	Not listed
Malware:	TrickBot
AS number:	AS44901
AS name:	BELCLOUD
Country:	BG
First seen:	2019-11-29 09:21:08 UTC
Last seen:	2019-11-29 19:05:15 UTC
Last online:	2019-11-29

Malware Samples

The table below documents all malware samples associated with this TrickBot botnet command&control server (C&C).

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Host	Port	Signature
2019-12-02 03:34:47	aa60b4272eeba6ff9c78438fc56c7d95	44/69 (63.77%)	94.156.35.206	443	TrickBot
2019-11-30 21:39:23	5f36c262fa10dc41cff079678c2b377e	43/70 (61.43%)	94.156.35.206	443	TrickBot
2019-11-29 19:16:23	13e742eab6e1309db174228df9be3c45	45/70 (64.29%)	94.156.35.206	443	TrickBot
2019-11-29 12:11:38	8a0359f91c7e951568f7d5c595b745be	28 / 69 (40.58%)	94.156.35.206	443	TrickBot

# of malware samples: 4