Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 152.170.196.157. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:152.170.196.157
Hostname:157-196-170-152.fibertel.com.ar
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS10318
AS name:Telecom Argentina S.A.
Country:- AR
First seen:2020-02-17 11:06:23 UTC
Last seen:2020-05-12 23:33:52 UTC
Last online:2020-04-15

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-05-15 06:21:424f305ad6a0384070d78f79b799bdd61cVirustotal results 46 / 72 (63.89%) 152.170.196.157443Heodo
2020-05-13 10:04:142b623e7eec225e7aa7095d2edb831521Virustotal results 31 / 61 (50.82%) 152.170.196.157443Heodo
2020-05-12 11:33:15a40d12031fbb76b690e70a3688238842Virustotal results 47 / 70 (67.14%) 152.170.196.157443Heodo
2020-05-10 21:51:30092113548bbdbc45f57e0893a56c0ffbVirustotal results 50 / 73 (68.49%) 152.170.196.157443Heodo
2020-05-10 18:11:374f5dcccb30d3c955ca643b2e6d28112en/a152.170.196.157443Heodo
2020-05-09 19:00:341022ac1764e4ea3ab0541308f1a7d51cn/a152.170.196.157443Heodo
2020-05-09 10:57:44fb96691b020d13f8400b00f7f3b02b1dVirustotal results 10 / 71 (14.08%) 152.170.196.157443Heodo
2020-05-08 17:26:444e81e992f93f3bb3532293699b34ebe6Virustotal results 46 / 72 (63.89%) 152.170.196.157443Heodo
2020-05-07 18:54:03003a0f7d6286e8b5a9f11313ce8c3b01Virustotal results 46 / 70 (65.71%) 152.170.196.157443Heodo
2020-05-06 16:18:15e815ef402b4298d2ac683de674c011dbn/a152.170.196.157443Heodo
2020-05-06 14:24:58e271fc42eb415c43cf5a841d7062c186Virustotal results 8 / 72 (11.11%) 152.170.196.157443Heodo
2020-05-06 13:50:52e09b7976c4f59e5d7429b9deba3e02d2Virustotal results 18 / 71 (25.35%) 152.170.196.157443Heodo
2020-05-06 13:40:27dff553d96af77b201f94111a60d99a2aVirustotal results 15 / 73 (20.55%) 152.170.196.157443Heodo
2020-05-06 12:52:00dd72c4ad82e29a2ab8f58753aa72885dVirustotal results 6 / 67 (8.96%) 152.170.196.157443Heodo
2020-05-06 09:31:56d2b6da164b20b7f514cbba5d8589a096Virustotal results 6 / 73 (8.22%) 152.170.196.157443Heodo
2020-05-06 01:14:22c6ec2e67d4ad649bfc8b584ef130fe3aVirustotal results 14 / 73 (19.18%) 152.170.196.157443Heodo
2020-05-02 08:04:12a764d144e2460185849293115f453843Virustotal results 6 / 72 (8.33%) 152.170.196.157443Heodo
2020-05-01 17:22:34a2e1f2f64fb09b8a4e772a5a734e5b33Virustotal results 13 / 73 (17.81%) 152.170.196.157443Heodo
2020-05-01 06:15:2885d803a8d838b8b3dc285e6ff8239aa2Virustotal results 34 / 73 (46.58%) 152.170.196.157443Heodo
2020-04-30 16:52:1430f0f7db9de08e235c06d4c21f030b58Virustotal results 34 / 71 (47.89%) 152.170.196.157443Heodo
2020-04-23 23:37:53bb10f2cbc8e90f69ef185d522b04c86bVirustotal results 6 / 57 (10.53%) 152.170.196.157443Heodo
2020-04-23 22:35:421643442abf64e7fe82547613c3ad8b73Virustotal results 8 / 70 (11.43%) 152.170.196.157443Heodo
2020-04-22 22:09:39265014a06a57ca015321889b87f805eeVirustotal results 14 / 72 (19.44%) 152.170.196.157443Heodo
2020-04-22 21:41:39aa7c710df7b435e88b2ea3b6d7f67a01Virustotal results 20 / 72 (27.78%) 152.170.196.157443Heodo
2020-04-22 16:24:183e9124a671ddbfcad91132d1d0f3fd6fVirustotal results 5 / 73 (6.85%) 152.170.196.157443Heodo
2020-04-21 19:21:33c463f3d297d3e9977e05edc08dc83befVirustotal results 9 / 72 (12.50%) 152.170.196.157443Heodo
2020-04-21 19:03:08a98fccb3c6cf6835f351c0651bca0bcbVirustotal results 9 / 71 (12.68%) 152.170.196.157443Heodo
2020-04-21 00:06:13311110efab1cbbed5cba113006d2ac69Virustotal results 8 / 70 (11.43%) 152.170.196.157443Heodo
2020-04-20 05:12:01154b9b79f26378ee7d240e5b18c1afc6Virustotal results 7 / 72 (9.72%) 152.170.196.157443Heodo
2020-04-20 03:52:51a5472eb9a7d9c6f3a766c16c8943c39eVirustotal results 38 / 71 (53.52%) 152.170.196.157443Heodo
2020-04-19 21:32:555c9ec32ca0003ccb55557f0812350ff3Virustotal results 4 / 70 (5.71%) 152.170.196.157443Heodo
2020-04-19 21:05:433cea62260ea526994d51333c4d7492a0Virustotal results 14 / 71 (19.72%) 152.170.196.157443Heodo
2020-04-19 16:52:56d3390a5b66ffd13e64626aee0036b5d7Virustotal results 15 / 72 (20.83%) 152.170.196.157443Heodo
2020-04-19 07:27:29e7dd8062b2e8d8f3c6b3edbfea51a577Virustotal results 11 / 70 (15.71%) 152.170.196.157443Heodo
2020-04-18 00:37:48c2b8716dc155c3ae77647d5fc995d06eVirustotal results 8 / 72 (11.11%) 152.170.196.157443Heodo
2020-04-17 17:50:0950d5f1f032fcbfd9a8e480814fafd6e1Virustotal results 34 / 72 (47.22%) 152.170.196.157443Heodo
2020-04-15 23:13:40bb2a91f3f05d34eaf664cd529b4f1660Virustotal results 42 / 72 (58.33%) 152.170.196.157443Heodo
2020-04-13 16:45:18337595256cb7048b02fb34a7412cac07Virustotal results 6 / 72 (8.33%) 152.170.196.157443Heodo
2020-04-13 16:45:18337595256cb7048b02fb34a7412cac07Virustotal results 6 / 72 (8.33%) 152.170.196.157443Heodo

# of malware samples: 39