Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 102.182.229.224. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:102.182.229.224
Hostname:102-182-229-224.ip.afrihost.joburg
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS37611
AS name:Afrihost
Country:- ZA
First seen:2020-02-20 01:46:06 UTC
Last seen:2020-03-02 14:27:16 UTC
Last online:2020-02-26

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-03-02 15:04:29e3c27d36e2f90f18d26dbdc7bba48a93n/a102.182.229.22480Heodo
2020-03-02 14:54:48cef3bf1dfbb0868238827d737733adddn/a102.182.229.22480Heodo
2020-03-02 14:51:25c70c1000fdaf91719266d3c8812314a9n/a102.182.229.22480Heodo
2020-03-02 14:44:147b0396e0d93cef664b52c7bb01736389n/a102.182.229.22480Heodo
2020-02-27 19:16:38b04ebe3b53340e34ed8cb6de9937c9abVirustotal results 6 / 72 (8.33%) 102.182.229.22480Heodo
2020-02-23 21:39:39b6e01cac8fa0ed0684723d282ff90cf6Virustotal results 6 / 72 (8.33%) 102.182.229.22480Heodo
2020-02-22 22:17:0228ec37a32859fbcb46644b52584d950en/a102.182.229.22480Heodo
2020-02-22 21:02:44404493c6d7697876255a906deb0a0dcdn/a102.182.229.22480Heodo
2020-02-20 18:21:445edc8d41c6b1ee4e3d7f7d55fdfcaffbVirustotal results 6 / 70 (8.57%) 102.182.229.22480Heodo
2020-02-20 17:55:194c225341c38bd12e037b948c1425a7f2Virustotal results 9 / 73 (12.33%) 102.182.229.22480Heodo
2020-02-20 01:56:585a52a03b0ee7ab16a8bc07565846cf90Virustotal results 4 / 71 (5.63%) 102.182.229.22480Heodo

# of malware samples: 11