Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 186.4.172.5. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:186.4.172.5
Hostname:host-186-4-172-5.netlife.ec
Status:Offline
Spamhaus SBL:SBL427490
Malware:Heodo -
AS number:AS27947
AS name:Telconet S.A
Country:- EC
First seen:2018-12-19 15:30:31 UTC
Last seen:2018-12-20 15:46:44 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-12-21 08:43:28a849c60eb2e9eddbc540fe0bd17a8545Virustotal results 36/59 (61.02%) 186.4.172.520Heodo
2018-12-21 08:33:5431810b3299a44e26e683f797c1c10159Virustotal results 15/59 (25.42%) 186.4.172.520Heodo
2018-12-21 07:32:1212c6bc9572e755417b13dd520ad48160Virustotal results 14/58 (24.14%) 186.4.172.520Heodo
2018-12-21 07:24:09f9fcb23a461c14adb0d2eb08913b212cVirustotal results 37/60 (61.67%) 186.4.172.520Heodo
2018-12-21 07:09:3189441a581462de041bb75be2d5825698Virustotal results 36/60 (60.00%) 186.4.172.520Heodo
2018-12-21 07:01:4179a0bfeb0ded0cf8fdb906e7a9b94b16Virustotal results 37/60 (61.67%) 186.4.172.520Heodo
2018-12-21 06:42:3833dbff0792c4d4ed4e930b1780fef34dVirustotal results 15/59 (25.42%) 186.4.172.520Heodo

# of malware samples: 7