Domain > irc.undernet.org

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to irc.undernet.org

MD5	A/V
231afc75679a0801db77bffe48d4aa6b	[W32.Clod8ff.Trojan.ddd1] [MemScan:Win32.Worm.Nugache.N] [Email-Worm.Win32.Nugache!O] [W32/Nugache@MM] [W32/Heuristic-257!Eldorado] [W32.Nugache.A@mm] [Backdoor.CL] [WORM_NUGACHE.A] [Email-Worm.Win32.Nugache.a] [I-Worm.Nugache.A!Pac] [Mal/EncPk-GK] [Worm.Win32.Nugache.~a] [BackDoor.IRC.Sdbot.2125] [Heuristic.LooksLike.Win32.Suspicious.F] [I-Worm.Nugache.a] [Worm/Win32.IRCBot] [Worm.Nugache] [W32/Nugache.H.worm] [Win32/Nugache.NAA] [PE:Malware.Packed!1.9C4E] [W32/Nugache.A@mm] [IRC/BackDoor.Nugache.A] [Worm.Win32.Nugache.ABKz]
326b3ea5a8ebb942b1f0484ce52ecc3b	[W32.Clodabb.Trojan.4c2b] [Win32.Worm.Duster.B] [Worm/W32.Duster.47616] [Worm.Duster.Win32.1] [W32/Duster.b] [Trojan.Win32.Duster.emlt] [W32/SillyWorm.FS] [W32.HLLW.Studd] [Backdoor] [Win32/Duster.A] [WORM_DUSTER.B] [Worm.Duster.B] [Worm.Win32.Duster.b] [Worm.Duster!8RhAxIE2EZc] [Worm.Win32.Duster.47616] [Win32.Worm.Duster.Lhxb] [Worm.Win32.Duster.C] [Win32.HLLW.Crow.4] [BehavesLike.Win32.ExploitMydoom.ph] [Mal/DelpDldr-C] [Worm/Duster.b] [Worm/Duster.B] [Worm/Win32.Duster] [Worm.Duster.b.(kcloud)] [Worm:Win32/Duster.B] [Dropper/Win32.Xema] [Win32/Duster.C] [W32/HLLW.Studd!worm] [Worm.Win32.Duster.Abos]
198ee28dfa910c2743ee3fbe47638fef	[Dropped:Win32.Worm.Netbot.A] [Worm.NetBot.a] [Artemis!198EE28DFA91] [W32/NetBot.a] [Trojan.Win32.NetBot.baxmq] [W32/SillyWorm.ST] [W32.IRCBot] [Win32/Spybot.ABJ] [Possible_Virus] [Worm.Win32.NetBot.a] [Worm.Sillyworm!7dE1MHnyK7I] [Mal/IRCBot-B] [Worm.Win32.Netbot.A] [Win32.HLLM.Soks] [Worm/NetBot.A.2] [Heuristic.LooksLike.Win32.Suspicious.J] [Worm/Sramota.axn] [Worm/Win32.NetBot.1] [W32/Worm.QDNP-1978] [Worm.NetBot] [Worm.Win32.NetBot.Ah] [Win32/Netbot.A] [PE:Worm.NetBot.k!1074742898] [Trojan-Downloader.Win32.Small] [IRC/IRCBot.A!worm] [Worm/Netbot.A] [W32/Netbot.C.worm] [Win32/Worm.BO.461]
d1d71a3dc562d4c99dad1b27a85bb001
deff02e9cf8267c77a88f64174c8b37b
3aa27afacea4e9f5b326378f53d94a3d
1a8bbf737c4ba5ee2b090996e21aea29
d3b0cd8d3309cf72f2a62d811d406c85
96ecd6320b6f1a6eddf055faffff88bf
4f7d40ec39ce90de5adab4619437b850	[W32.eHeur.Malware00] [W32/IRCBot-based!Maximus] [Mal/IRCBot-B] [DLOADER.IRC.Trojan] [trojan.win32.carberp.i] [W32/IRCBot-based!Maximus] [Backdoor:Win32/IRCbot.HB]

DNS Resolutions

Date	IP Address
2013-06-04	208.83.20.130 (ClassC)
2013-06-11	69.42.215.170 (ClassC)
2013-08-14	173.245.201.28 (ClassC)
2013-08-14	198.148.91.146 (ClassC)
2013-08-15	208.64.123.210 (ClassC)
2013-09-16	94.125.182.255 (ClassC)
2014-05-12	91.236.182.1 (ClassC)
2014-10-15	154.35.175.201 (ClassC)
2015-06-15	69.16.132.50 (ClassC)
2015-12-13	72.46.150.94 (ClassC)
2018-04-11	172.106.10.18 (ClassC)
2018-06-19	154.35.175.201 (ClassC)
2018-08-22	170.178.191.18 (ClassC)
2019-04-30	67.223.141.158 (ClassC)
2019-12-10	45.58.135.130 (ClassC)
2019-12-10	104.149.232.242 (ClassC)
2020-06-09	27.131.104.74 (ClassC)
2020-08-17	91.236.182.1 (ClassC)
2020-09-14	84.17.39.153 (ClassC)
2020-10-20	154.35.136.18 (ClassC)
2020-11-20	84.17.57.209 (ClassC)
2020-12-19	84.17.57.210 (ClassC)
2020-12-20	84.17.39.154 (ClassC)
2021-01-11	202.174.106.66 (ClassC)
2024-05-04	185.117.74.172 (ClassC)
2024-08-15	185.11.180.49 (ClassC)
2024-11-07	185.198.56.60 (ClassC)
2025-05-18	185.198.56.27 (ClassC)
2025-06-08	94.125.182.255 (ClassC)
2025-07-08	45.88.202.250 (ClassC)
2025-08-03	23.228.66.219 (ClassC)
2025-09-15	199.71.214.87 (ClassC)
2025-09-27	104.152.54.52 (ClassC)
2025-10-15	186.233.185.155 (ClassC)
2025-11-28	185.243.218.59 (ClassC)
2025-12-03	172.83.156.122 (ClassC)

Subdomains

Date	Domain	IP
vancouver.bc.ca.undernet.org	2014-05-06	91.236.182.1
irc.undernet.org	2014-05-12	91.236.182.1
se.undernet.org	2014-03-09	91.236.182.1
uk.undernet.org	2013-08-02	94.125.182.255
coder-com.undernet.org	2015-03-07	216.34.181.97
us.undernet.org	2014-05-30	91.236.182.1
losangeles.ca.us.undernet.org	2025-11-05	23.228.66.219
tampa.fl.us.undernet.org	2013-07-24	198.148.91.146
Tampa.FL.US.Undernet.Org	2014-07-10	154.35.175.201
mesa2.az.us.undernet.org	2025-01-29	45.58.183.18
mesa.az.us.undernet.org	2015-05-07	173.245.201.28
eu.undernet.org	2019-08-15	91.236.182.1
elsene.be.eu.undernet.org	2013-07-17	91.236.182.1
brussels.be.eu.undernet.org	2015-03-01	91.236.182.1
carouge.ch.eu.undernet.org	2013-07-26	91.236.182.1
surrey.uk.eu.undernet.org	2015-03-01	91.236.182.1
Lelystad.NL.EU.UnderNet.Org	2024-09-14	185.198.56.60
ede.nl.eu.undernet.org	2024-08-03	45.58.183.18
amsterdam.nl.eu.undernet.org	2015-03-01	91.236.182.1
oslo2.no.eu.undernet.org	2014-03-17	91.236.182.1
oslo.no.eu.undernet.org	2024-02-14	185.117.74.172
Bucharest.ro.eu.undernet.org	2013-05-28	82.76.255.62
zagreb.hr.eu.undernet.org	2024-08-07	185.11.180.49
graz.at.eu.undernet.org	2015-05-04	129.27.9.248
budapest.hu.eu.undernet.org	2013-08-15	94.125.182.255
ix.undernet.org	2025-10-14	194.68.45.100
forseti.us.ix.undernet.org	2014-05-10	91.236.182.1

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]