Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 110.37.226.196. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:110.37.226.196
Hostname:WGPON-37226-196.wateen.net
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS38264
AS name:WATEEN-IMS-PK-AS-AP National WiMAX/IMS environment
Country:- PK
First seen:2020-02-16 17:00:17 UTC
Last seen:2020-03-23 10:37:29 UTC
Last online:2020-03-30

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-03-25 11:38:03f9f2f861e164282de2c3c1f4f12933den/a110.37.226.19680Heodo
2020-03-25 11:36:51e0b32b7204bfd5e5b16b62bf6b9c8f1en/a110.37.226.19680Heodo
2020-03-25 11:36:27daac0417c5e3c5668df8078631a7f526n/a110.37.226.19680Heodo
2020-03-25 11:36:06fabddcf3166ff8b11df1e732d5df8122n/a110.37.226.19680Heodo
2020-03-25 11:30:509d13efa49e012f27f05fd3ddc5ec37f4n/a110.37.226.19680Heodo
2020-03-25 11:27:139bb1d4cb67aa5920bb9475ece4612905n/a110.37.226.19680Heodo
2020-03-25 11:26:31adbefbdd900d84e89fdba45d0fbbe770n/a110.37.226.19680Heodo
2020-03-25 11:26:19473f5da6bf46fe5cf559a4f816870362n/a110.37.226.19680Heodo
2020-03-25 11:24:308c6550b0541d7fee0e6423ab4bce5901n/a110.37.226.19680Heodo
2020-03-25 11:22:5229ac5b60850e40368224db7dcbe467e1n/a110.37.226.19680Heodo
2020-03-25 11:16:31134099415951caef9b5506ce63c06b76n/a110.37.226.19680Heodo
2020-03-23 11:02:17c01805622f7f07a8695b90855a0c94bcn/a110.37.226.19680Heodo
2020-02-27 19:16:38b04ebe3b53340e34ed8cb6de9937c9abVirustotal results 6 / 72 (8.33%) 110.37.226.19680Heodo
2020-02-17 10:06:481543b91bd793af9afba108ecbfb0b3dbn/a110.37.226.19680Heodo

# of malware samples: 14