Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 142.59.39.157. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:142.59.39.157
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL426568
Malware:Heodo -
AS number:AS852
AS name:ASN852 - TELUS Communications Inc.
Country:- CA
First seen:2018-12-12 05:11:34 UTC
Last seen:2018-12-13 18:50:17 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-12-13 19:08:12dd52080329ccd3e205954d25be822e93Virustotal results 15/59 (25.42%) 142.59.39.157443Heodo
2018-12-13 17:21:30c8da82ace5a3bc1f5bb574e57e87a251Virustotal results 15/69 (21.74%) 142.59.39.157443Heodo
2018-12-13 17:13:31dfbc68a876605b87a126ce64d3754738Virustotal results 41/69 (59.42%) 142.59.39.157443Heodo
2018-12-13 11:22:0720a2847a46d997efd2a4f693950e978cVirustotal results 16/66 (24.24%) 142.59.39.157443Heodo

# of malware samples: 4