Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 200.59.189.217. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:200.59.189.217
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL446862
Malware:Heodo -
AS number:AS264778
AS name:TotalCom Venezuela C.A.
Country:- VE
First seen:2019-05-09 20:23:01 UTC
Last seen:2019-05-18 10:22:42 UTC
Last online:2019-05-14

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-07-02 00:26:180312f584e9b90252dfcadc74b768313eVirustotal results 26/71 (36.62%) 200.59.189.21780Heodo
2019-07-01 22:09:42a74f0ff632c844bad565456d0cdc77d3Virustotal results 42/72 (58.33%) 200.59.189.21780Heodo
2019-05-27 01:13:0670a0f1bf700db7dff85bb55ff48b19eeVirustotal results 52/71 (73.24%) 200.59.189.21780Heodo
2019-05-24 13:42:47a25e09ecc69254628b48a69e6a4b6073Virustotal results 27/73 (36.99%) 200.59.189.21780Heodo
2019-05-19 04:47:46e399ea2c33f146e5c78e741c55bf6d9bVirustotal results 50/68 (73.53%) 200.59.189.21780Heodo
2019-05-19 04:20:336a86ccd8d7490c126da89c7492575deeVirustotal results 29/70 (41.43%) 200.59.189.21780Heodo
2019-05-17 20:02:14a4d0dedcb3e90a167b44fa8444828860Virustotal results 50/72 (69.44%) 200.59.189.21780Heodo
2019-05-11 23:45:2014e054d4103aedffafd6e8f9d795ebafVirustotal results 50/71 (70.42%) 200.59.189.21780Heodo
2019-05-09 22:47:04b9a10fef9cc3ece00229b362c92ea026Virustotal results 15/72 (20.83%) 200.59.189.21780Heodo
2019-05-09 20:34:105fcc139612a1f088fdbd7c1c1022bd36Virustotal results 22/72 (30.56%) 200.59.189.21780Heodo

# of malware samples: 10