Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 103.229.72.197. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:103.229.72.197
Hostname:ip-229-72-197.masterweb.net
Status:- Online
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS55660
AS name:MWN-AS-ID PT Master Web Network
Country:- ID
First seen:2020-11-18 16:46:48 UTC
Last seen:2020-11-22 20:37:03 UTC
Last online:2020-11-24

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-11-23 00:19:1664a041c5ede4495f3902c881f0c96dbbVirustotal results 42 / 72 (58.33%) 103.229.72.1978080Heodo
2020-11-22 22:49:5041ed15a2db12108d1c76152994b9e47aVirustotal results 42 / 71 (59.15%) 103.229.72.1978080Heodo
2020-11-22 20:47:03171a927d9ddd18076fcda730dd4bc93dVirustotal results 42 / 71 (59.15%) 103.229.72.1978080Heodo
2020-11-22 18:40:51cb1d6527a14cd9d7a3726da3ec8b9327n/a103.229.72.1978080Heodo
2020-11-22 13:45:58b06bdf2e61e81cf560fec85283c8444cVirustotal results 37 / 72 (51.39%) 103.229.72.1978080Heodo
2020-11-22 13:42:48b069ffaf2066e22ef7641cbdd6d0866an/a103.229.72.1978080Heodo
2020-11-22 13:18:48afde9eaf0c8084e8ceb8ee5742e5f65cVirustotal results 23 / 72 (31.94%) 103.229.72.1978080Heodo
2020-11-22 04:07:59a2caa0d72ed695129bcacad9967390ccVirustotal results 23 / 71 (32.39%) 103.229.72.1978080Heodo
2020-11-22 00:56:498dd69f02f5cef8a5fca1bde4ff3de90aVirustotal results 45 / 72 (62.50%) 103.229.72.1978080Heodo
2020-11-21 22:25:405ad0bdd06a5c9f171b4233e8bbcd9b1fVirustotal results 49 / 72 (68.06%) 103.229.72.1978080Heodo
2020-11-21 22:25:405ad0bdd06a5c9f171b4233e8bbcd9b1fVirustotal results 49 / 72 (68.06%) 103.229.72.1978080Heodo
2020-11-21 03:18:40a0f58affd6fa1d0e9e6b05bed7661cc3Virustotal results 42 / 71 (59.15%) 103.229.72.1978080Heodo
2020-11-18 21:59:2253fe2605f7e82ded46152ad37634010cVirustotal results 26 / 72 (36.11%) 103.229.72.1978080Heodo

# of malware samples: 13