Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 179.53.156.88. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:179.53.156.88
Hostname:88.156.53.179.d.dyn.claro.net.do
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS6400
AS name:Compaa Dominicana de Telfonos, C. por A. - CODETEL
Country:- DO
First seen:2019-01-21 12:08:34 UTC
Last seen:2019-01-22 15:54:48 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-01-22 16:08:188853997fe8c46705edcc06e18e6d736fVirustotal results 11/58 (18.97%) 179.53.156.88443Heodo
2019-01-22 15:49:099d240a22e7a70229dcbbfcc3abdf5a78Virustotal results 28/58 (48.28%) 179.53.156.88443Heodo
2019-01-22 15:49:099d240a22e7a70229dcbbfcc3abdf5a78Virustotal results 28/58 (48.28%) 179.53.156.88443Heodo
2019-01-22 15:35:46f9af5e039609540df39b06163c85b34aVirustotal results 24/58 (41.38%) 179.53.156.88443Heodo
2019-01-22 15:31:13daabfaa66f943195c7bb42075fb58430Virustotal results 16/56 (28.57%) 179.53.156.88443Heodo
2019-01-22 15:28:55b8d9fc7fb9da17e7f466b523259b8a35Virustotal results 22/59 (37.29%) 179.53.156.88443Heodo
2019-01-22 15:21:0181d3eae083c5dc78f2b1c0be0c3e56e2Virustotal results 51/71 (71.83%) 179.53.156.88443Heodo
2019-01-22 15:20:131cbcd2bfcd5538d1f1d603d8315329a1Virustotal results 19/71 (26.76%) 179.53.156.88443Heodo
2019-01-22 14:49:5159b4960273d98837a1c0be530eee01a5Virustotal results 16/56 (28.57%) 179.53.156.88443Heodo
2019-01-22 14:45:09d70ea8181276bc35feffe563c562b6ddVirustotal results 17/71 (23.94%) 179.53.156.88443Heodo

# of malware samples: 10