Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 189.212.199.126. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:189.212.199.126
Hostname:189-212-199-126.static.axtel.net
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS6503
AS name:Mega Cable, S.A. de C.V.
Country:- MX
First seen:2020-02-15 12:24:13 UTC
Last seen:2020-06-17 01:57:31 UTC
Last online:2020-04-10

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-06-17 02:10:1101335c7c2f0f5fd84fbf37e6a6733a5fVirustotal results 53 / 73 (72.60%) 189.212.199.126443Heodo
2020-04-13 06:42:53c6885f9adbb32c4fd0e2f62e26f6b2c4Virustotal results 6 / 71 (8.45%) 189.212.199.126443Heodo
2020-04-12 05:48:35b5c79bc831b1f769d4efbaa228b36c8cVirustotal results 6 / 71 (8.45%) 189.212.199.126443Heodo
2020-04-12 01:15:58e017349a77bed3119cc6ada2f6e904d1Virustotal results 17 / 72 (23.61%) 189.212.199.126443Heodo
2020-04-04 17:05:30b0b32618321f33f00f18b462b67e3a7cn/a189.212.199.126443Heodo
2020-04-03 20:56:32e4196cadf34311b47fff0050456badf9Virustotal results 25 / 73 (34.25%) 189.212.199.126443Heodo
2020-04-03 09:14:05e9e237674b16f0b3353086b177edcae2n/a189.212.199.126443Heodo
2020-04-03 09:11:36dd726b2539276bf11a0e59d3b631304an/a189.212.199.126443Heodo
2020-04-03 09:09:15dbbae51ad48eaf0e18a6e803eace7674n/a189.212.199.126443Heodo
2020-04-03 09:08:4256d7ab5344816e7ddb9e8091612a83c8n/a189.212.199.126443Heodo
2020-04-03 09:08:327eb9aa2ff95b02599bcfaf74ca5aa61bn/a189.212.199.126443Heodo
2020-04-03 09:07:31d98fc0e7388c9d0ccddd1917e7dc7654n/a189.212.199.126443Heodo
2020-04-03 09:06:42d60383503a88e5f2395d02df0c3950den/a189.212.199.126443Heodo
2020-04-03 09:05:07ab343b7b2d1214d6e417befd811d15ddn/a189.212.199.126443Heodo
2020-04-03 09:04:11da5d05b5f0ad86741bca4407cd560e21n/a189.212.199.126443Heodo
2020-04-03 09:03:07482b477eba67a7bcc0202f2b9d01e898n/a189.212.199.126443Heodo
2020-04-03 08:59:29655d09fe9b2fd0d4324db3b17ffcef1bn/a189.212.199.126443Heodo

# of malware samples: 17