Browse Botnet C&Cs
Here you can browse the list of botnet Command&Control servers (C&Cs) tracked by Feodo Tracker, associated with Dridex and Emotet (aka Heodo). When Feodo Tracker was launched in 2010, it was ment to track Feodo botnet C&Cs. However, Feodo evolved further and different piece of malware of Feodo appeared:
- Cridex: also known as Bugat was an ebanking Trojan active until around 2013. This variant is not active anymore.
- Feodo: is a successor of the Cridex ebanking Trojan that first appeared in 2010. This variant is not active anymore.
- Geodo: is a successor of the Feodo ebanking Trojan that first appeared in 2014. This variant is commonly also known as Emotet. This variant is not active anymore.
- Dridex: is a successor of the Cridex ebanking Trojan. It first appeared in 2011 and is still very active as of today (2018). There are speculations that the botnet masters behind the ebanking Trojan Dyre moved their operation over to Dridex.
- Heodo: is a successor of the Geodo (aka Emotet). It first appeared in March 2017 and is also commonly known as Emotet. While it was initally used to commit ebanking fraud, it later turned over to a Pay-Per-Install (PPI)-like botnet which is propagating itself through compromised email credentials.
- TrickBot: has no code base with Emotet. However, TrickBot usually gets dropped by Emotet for lateral movement and to drop additional malware (such as Ryuk ransomware).
Filter for: Heodo (aka Emotet) TrickBot
| Firstseen (UTC) | Host | Malware | Status | SBL | Network (ASN) | Country |
|---|---|---|---|---|---|---|
| 2020-11-23 19:42:18 | 45.12.110.179 | TrickBot |  Online | Not listed | AS35913 DEDIPATH-LLC |  US |
| 2020-11-23 19:42:18 | 94.140.114.99 | TrickBot | Online | Not listed | AS43513 NANO-AS |  LV |
| 2020-11-23 19:42:18 | 212.8.251.21 | TrickBot | Offline | Not listed | AS60117 HS |  NL |
| 2020-11-23 19:42:18 | 192.119.171.218 | TrickBot | Online | Not listed | AS55154 MADGEN-01 | US |
| 2020-11-23 19:16:23 | 175.145.248.25 | Heodo | Online | Not listed | AS4788 TMNET-AS-AP TM Net, Internet Service Provider |  MY |
| 2020-11-23 19:16:22 | 191.223.36.170 | Heodo | Online | Not listed | AS8167 Brasil Telecom S/A - Filial Distrito Federal |  BR |
| 2020-11-21 18:42:25 | 82.137.29.8 | Heodo | Offline | Not listed | AS8708 RCS-RDS 73-75 Dr. Staicovici |  RO |
| 2020-11-21 18:42:25 | 180.232.111.30 | Heodo | Online | Not listed | AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. |  PH |
| 2020-11-21 18:42:25 | 111.67.12.222 | Heodo | Online | Not listed | AS55803 HOSTOPIA-AU Hostopia Australia Web Pty Ltd |  AU |
| 2020-11-19 19:52:42 | 24.101.229.82 | Heodo | Offline | Not listed | AS27364 ACS-INTERNET | US |
| 2020-11-19 19:37:11 | 24.69.65.8 | Heodo | Online | Not listed | AS6327 SHAW |  CA |
| 2020-11-19 05:52:32 | 141.136.0.4 | TrickBot | Offline | Not listed | AS43513 NANO-AS | LV |
| 2020-11-19 05:44:28 | 201.102.218.101 | Heodo | Offline | Not listed | AS8151 Uninet S.A. de C.V. |  MX |
| 2020-11-19 05:44:23 | 190.18.184.113 | Heodo | Offline | Not listed | AS10318 Telecom Argentina S.A. |  AR |
| 2020-11-18 16:47:09 | 161.0.153.60 | Heodo | Offline | Not listed | AS27800 Digicel Trinidad and Tobago Ltd. |  TT |
| 2020-11-18 16:46:48 | 103.229.72.197 | Heodo | Online | Not listed | AS55660 MWN-AS-ID PT Master Web Network |  ID |
| 2020-11-17 19:54:29 | 51.75.222.163 | TrickBot | Offline | Not listed | AS16276 OVH |  FR |
| 2020-11-17 15:27:19 | 199.189.108.71 | TrickBot | Offline | Not listed | AS29854 WESTHOST | US |
| 2020-11-17 14:48:49 | 162.212.158.135 | TrickBot | Offline | Not listed | AS11878 TZULO | US |
| 2020-11-16 05:13:24 | 156.96.119.28 | TrickBot | Offline | SBL461359 | AS46664 VDI-NETWORK | US |
| 2020-11-14 13:30:10 | 43.245.216.190 | TrickBot | Offline | Not listed | AS24492 IIT-WICAM-AS-AP WiCAM Corporation Ltd. |  KH |
| 2020-11-14 13:30:10 | 49.156.41.74 | TrickBot | Offline | Not listed | AS24492 IIT-WICAM-AS-AP WiCAM Corporation Ltd. | KH |
| 2020-11-14 13:30:06 | 45.230.8.34 | TrickBot | Offline | Not listed | AS266710 Gimenez Pedro Santiago (Clorindaconectada) | AR |
| 2020-11-13 20:27:34 | 156.96.62.82 | TrickBot | Offline | SBL461359 | AS46664 VDI-NETWORK | US |
| 2020-11-13 18:32:27 | 91.200.103.217 | TrickBot | Offline | Not listed | AS30823 COMBAHTON combahton GmbH |  DE |
| 2020-11-13 18:07:29 | 94.140.115.229 | TrickBot | Offline | Not listed | AS43513 NANO-AS | LV |
| 2020-11-13 18:07:29 | 91.200.103.193 | TrickBot | Offline | Not listed | AS30823 COMBAHTON combahton GmbH | DE |
| 2020-11-13 18:07:28 | 144.172.64.26 | TrickBot | Offline | Not listed | AS8100 ASN-QUADRANET-GLOBAL | US |
| 2020-11-13 07:24:54 | 181.165.68.127 | Heodo | Online | Not listed | AS10318 Telecom Argentina S.A. | AR |
| 2020-11-12 19:56:45 | 195.123.241.22 | TrickBot | Offline | Not listed | AS204957 GREENFLOID-AS | US |
| 2020-11-11 23:43:23 | 99.247.33.186 | Heodo | Offline | Not listed | AS812 ROGERS-COMMUNICATIONS | CA |
| 2020-11-11 21:25:19 | 113.163.216.135 | Heodo | Offline | Not listed | AS45899 VNPT-AS-VN VNPT Corp |  VN |
| 2020-11-11 18:50:25 | 94.140.115.91 | TrickBot | Offline | Not listed | AS43513 NANO-AS | LV |
| 2020-11-11 18:47:35 | 195.123.240.119 | TrickBot | Offline | Not listed | AS204957 GREENFLOID-AS | US |
| 2020-11-11 18:42:44 | 194.5.249.196 | TrickBot | Offline | Not listed | AS64398 NXTHOST-64398 NXTHOST.COM - NXTSERVERS SRL | RO |
| 2020-11-11 10:53:47 | 195.123.241.222 | TrickBot | Offline | Not listed | AS204957 GREENFLOID-AS | US |
| 2020-11-10 13:28:20 | 195.123.241.226 | TrickBot | Offline | Not listed | AS204957 GREENFLOID-AS | US |
| 2020-11-09 19:48:23 | 195.123.240.40 | TrickBot | Offline | Not listed | AS204957 GREENFLOID-AS | US |
| 2020-11-09 19:38:42 | 94.140.115.99 | TrickBot | Offline | Not listed | AS43513 NANO-AS | LV |
| 2020-11-09 16:44:20 | 189.55.48.40 | Heodo | Offline | Not listed | AS28573 CLARO S.A. | BR |
| 2020-11-08 19:08:15 | 41.231.225.139 | Heodo | Offline | Not listed | AS2609 TN-BB-AS Tunisia BackBone AS |  TN |
| 2020-11-08 02:04:18 | 208.74.26.234 | Heodo | Offline | Not listed | AS32584 I-NETLINK | CA |
| 2020-11-08 02:04:16 | 190.146.92.48 | Heodo | Offline | Not listed | AS10620 Telmex Colombia S.A. |  CO |
| 2020-11-08 02:04:10 | 5.2.212.254 | Heodo | Offline | Not listed | AS8708 RCS-RDS 73-75 Dr. Staicovici | RO |
| 2020-11-07 21:26:18 | 110.39.162.2 | Heodo | Online | Not listed | AS38264 WATEEN-IMS-PK-AS-AP National WiMAX/IMS environment |  PK |
| 2020-11-07 21:26:17 | 86.127.212.235 | Heodo | Offline | Not listed | AS8708 RCS-RDS 73-75 Dr. Staicovici | RO |
| 2020-11-07 21:26:15 | 181.120.72.110 | Heodo | Offline | Not listed | AS23201 Telecel S.A. |  PY |
| 2020-11-07 17:55:58 | 37.221.70.250 | Heodo | Offline | Not listed | AS49121 INFTELE-AS |  CZ |
| 2020-11-07 17:46:51 | 79.110.52.103 | TrickBot | Offline | Not listed | AS9009 M247 | NL |
| 2020-11-07 06:55:50 | 66.85.183.5 | TrickBot | Offline | Not listed | AS20454 SSASN2 | US |
| 2020-11-07 06:55:50 | 91.200.102.21 | TrickBot | Offline | Not listed | AS30823 COMBAHTON combahton GmbH | DE |
| 2020-11-07 06:55:50 | 51.81.112.135 | TrickBot | Online | Not listed | AS16276 OVH | US |
| 2020-11-07 06:55:50 | 194.5.249.176 | TrickBot | Offline | Not listed | AS64398 NXTHOST-64398 NXTHOST.COM - NXTSERVERS SRL | RO |
| 2020-11-07 05:05:29 | 185.163.47.157 | TrickBot | Offline | Not listed | AS39798 MIVOCLOUD |  MD |
| 2020-11-07 02:39:49 | 186.146.229.172 | Heodo | Online | Not listed | AS10620 Telmex Colombia S.A. | CO |
| 2020-11-07 01:40:24 | 94.52.168.188 | Heodo | Offline | Not listed | AS48161 NG-AS Sos. Bucuresti - Ploiesti nr. 42-44 | RO |
| 2020-11-06 20:18:20 | 78.125.252.112 | Heodo | Offline | Not listed | AS8228 CEGETEL-AS | FR |
| 2020-11-06 20:00:28 | 81.241.22.161 | Heodo | Offline | Not listed | AS5432 PROXIMUS-ISP-AS |  BE |
| 2020-11-06 20:00:28 | 27.78.27.110 | Heodo | Offline | Not listed | AS7552 VIETEL-AS-AP Viettel Group | VN |
| 2020-11-06 20:00:28 | 27.82.13.10 | Heodo | Offline | Not listed | AS2516 KDDI KDDI CORPORATION |  JP |
| 2020-11-06 00:38:19 | 5.2.182.7 | Heodo | Offline | Not listed | AS8708 RCS-RDS 73-75 Dr. Staicovici | RO |
| 2020-11-06 00:38:15 | 80.15.100.37 | Heodo | Online | Not listed | AS3215 France Telecom - Orange | FR |
| 2020-11-05 19:40:19 | 98.150.169.135 | Heodo | Online | Not listed | AS20001 TWC-20001-PACWEST | US |
| 2020-11-05 19:40:15 | 12.184.217.101 | Heodo | Offline | Not listed | AS7018 ATT-INTERNET4 | US |
| 2020-11-05 19:40:14 | 109.116.245.80 | Heodo | Online | Not listed | AS30722 VODAFONE-IT-ASN |  IT |
| 2020-11-05 19:40:13 | 51.89.36.180 | Heodo | Online | Not listed | AS16276 OVH |  GB |
| 2020-11-05 19:00:00 | 177.85.167.10 | Heodo | Online | Not listed | AS52743 Twister Soft Net Ltda | BR |
| 2020-11-05 19:00:00 | 186.188.212.201 | Heodo | Offline | Not listed | AS18809 Cable Onda |  PA |
| 2020-11-05 18:59:02 | 74.75.104.224 | Heodo | Online | Not listed | AS11351 TWC-11351-NORTHEAST | US |
| 2020-11-05 18:54:13 | 154.127.113.242 | Heodo | Offline | Not listed | AS37358 BITCO |  ZA |
| 2020-11-05 13:48:14 | 221.161.206.22 | Heodo | Offline | Not listed | AS4766 KIXS-AS-KR Korea Telecom |  KR |
| 2020-11-05 13:48:10 | 82.208.149.146 | Heodo | Online | Not listed | AS6830 LIBERTYGLOBAL Liberty Global (formerly UPC Broadband Holding, aka AORTA) | RO |
| 2020-11-03 22:12:14 | 190.147.84.191 | Heodo | Offline | Not listed | AS10620 Telmex Colombia S.A. | CO |
| 2020-11-03 16:47:43 | 190.7.217.90 | Heodo | Offline | Not listed | AS27876 American Data Networks |  CR |
| 2020-10-29 19:16:38 | 181.120.29.49 | Heodo | Online | Not listed | AS23201 Telecel S.A. | PY |
| 2020-10-29 19:16:35 | 190.45.24.210 | Heodo | Offline | Not listed | AS22047 VTR BANDA ANCHA S.A. |  CL |
| 2020-10-29 19:16:32 | 109.242.153.9 | Heodo | Offline | Not listed | AS25472 WIND-AS |  GR |
| 2020-10-29 19:16:28 | 169.1.39.242 | Heodo | Offline | Not listed | AS37611 Afrihost | ZA |
| 2020-10-29 19:14:24 | 201.171.244.130 | Heodo | Offline | Not listed | AS6332 Telefonos del Noroeste, S.A. de C.V. | MX |
| 2020-10-29 19:14:20 | 64.207.182.168 | Heodo | Online | Not listed | AS398110 GO-DADDY-COM-LLC | US |
| 2020-10-29 19:14:19 | 173.173.254.105 | Heodo | Offline | Not listed | AS11427 TWC-11427-TEXAS | US |
| 2020-10-29 19:14:16 | 153.204.122.254 | Heodo | Offline | Not listed | AS4713 OCN NTT Communications Corporation | JP |
| 2020-10-29 19:14:13 | 201.163.74.203 | Heodo | Offline | Not listed | AS11172 Alestra, S. de R.L. de C.V. | MX |
| 2020-10-29 16:43:37 | 118.69.11.81 | Heodo | Offline | Not listed | AS18403 FPT-AS-AP The Corporation for Financing & Promoting Technology | VN |
| 2020-10-28 19:25:58 | 193.251.77.110 | Heodo | Offline | Not listed | AS3215 France Telecom - Orange | FR |
| 2020-10-28 16:18:16 | 74.40.205.197 | Heodo | Online | Not listed | AS5650 FRONTIER-FRTR | US |
| 2020-10-28 16:18:15 | 100.37.240.62 | Heodo | Offline | Not listed | AS701 UUNET | US |
| 2020-10-28 16:18:11 | 51.89.199.141 | Heodo | Online | Not listed | AS16276 OVH | GB |
| 2020-10-28 16:12:34 | 78.101.224.151 | Heodo | Offline | Not listed | AS42298 GCC-MPLS-PEERING GCC MPLS peering |  QA |
| 2020-10-28 16:12:31 | 189.123.103.233 | Heodo | Offline | Not listed | AS28573 CLARO S.A. | BR |
| 2020-10-28 16:08:20 | 179.222.115.170 | Heodo | Offline | Not listed | AS28573 CLARO S.A. | BR |
| 2020-10-28 16:08:18 | 200.24.255.23 | Heodo | Offline | Not listed | AS52381 Sociedad Cooperativa Popular Limitada de Comodoro | AR |
| 2020-10-28 16:08:15 | 60.249.78.226 | Heodo | Offline | Not listed | AS3462 HINET Data Communication Business Group |  TW |
| 2020-10-28 15:54:50 | 152.32.75.74 | Heodo | Online | Not listed | AS17639 CONVERGE-AS Converge ICT Solutions Inc. | PH |
| 2020-10-28 15:50:43 | 192.198.91.138 | Heodo | Offline | Not listed | AS31863 DACEN-2 | US |
| 2020-10-28 15:50:23 | 80.227.52.78 | Heodo | Offline | Not listed | AS15802 DU-AS1 |  AE |
| 2020-10-28 15:29:45 | 190.202.229.74 | Heodo | Offline | Not listed | AS8048 CANTV Servicios, Venezuela |  VE |
| 2020-10-28 09:14:37 | 190.64.88.186 | Heodo | Offline | Not listed | AS6057 Administracion Nacional de Telecomunicaciones |  UY |
| 2020-10-28 09:14:34 | 189.34.181.88 | Heodo | Offline | Not listed | AS28573 CLARO S.A. | BR |
| 2020-10-28 09:14:32 | 109.101.137.162 | Heodo | Offline | Not listed | AS9050 RTD Bucharest, Romania | RO |