Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 201.199.89.223. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:201.199.89.223
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL447361
Malware:Heodo -
AS number:AS11830
AS name:Instituto Costarricense de Electricidad y Telecom.
Country:- CR
First seen:2019-05-10 01:29:03 UTC
Last seen:2019-06-13 06:59:37 UTC
Last online:2019-06-07

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-06-13 07:29:186b1e40af1d8d06fff2d4683d95e1a782Virustotal results 58/69 (84.06%) 201.199.89.2238443Heodo
2019-06-13 07:09:0080637d1ec6004e907798722232242377Virustotal results 56/70 (80.00%) 201.199.89.2238443Heodo
2019-06-09 04:01:08dd6495fa1958a9f755ec18e47c3a9547Virustotal results 50/71 (70.42%) 201.199.89.2238443Heodo
2019-06-08 00:32:1521a0bb5c4291fb965d455397d0c163ccVirustotal results 50/71 (70.42%) 201.199.89.2238443Heodo
2019-06-06 09:14:323467edcf23b9ff21349c02dddb0a99c3Virustotal results 49/71 (69.01%) 201.199.89.2238443Heodo
2019-06-06 06:05:350e2b68f69c5ac5a1f68e804f30f79a0bVirustotal results 42/71 (59.15%) 201.199.89.2238443Heodo
2019-05-31 11:09:252f0ae24a9171d271a59f528b78db2f68Virustotal results 46/73 (63.01%) 201.199.89.2238443Heodo
2019-05-30 21:19:4412474bad30eb3b0a38075de118a1bfaeVirustotal results 52/70 (74.29%) 201.199.89.2238443Heodo
2019-05-30 19:57:405ace29cca15749cdec2aeb77023164cdVirustotal results 49/73 (67.12%) 201.199.89.2238443Heodo
2019-05-29 08:08:24550765422a700413320a17e81c8860fdVirustotal results 47/71 (66.20%) 201.199.89.2238443Heodo
2019-05-29 06:51:32c136d0807bf5d652b79d9b890a4e4532Virustotal results 47/73 (64.38%) 201.199.89.2238443Heodo
2019-05-29 04:04:035e5f3274dc79ab7d2c03fbf79ce90d68Virustotal results 25/71 (35.21%) 201.199.89.2238443Heodo
2019-05-29 01:36:44cde716f228023d3fbbfff885170ac2acVirustotal results 51/71 (71.83%) 201.199.89.2238443Heodo
2019-05-29 00:41:30cf4edb11fb98803e40a252e77c68d744Virustotal results 43/72 (59.72%) 201.199.89.2238443Heodo
2019-05-29 00:02:2850920cb460cd8f5346c2502b07ba6121Virustotal results 48/73 (65.75%) 201.199.89.2238443Heodo
2019-05-28 23:35:117168b98e2d76d669be0c3e42d0aa66cfVirustotal results 48/71 (67.61%) 201.199.89.2238443Heodo
2019-05-28 23:22:03a36e30acbcfbe582ba1b59d70bd5f009Virustotal results 40/72 (55.56%) 201.199.89.2238443Heodo
2019-05-27 12:26:00c9e3b857c9d3e9391df8c3b0a6788f9aVirustotal results 47/71 (66.20%) 201.199.89.2238443Heodo
2019-05-25 13:51:26b05f41b3945612893a1c66de57428c87Virustotal results 52/71 (73.24%) 201.199.89.2238443Heodo
2019-05-25 01:41:23936b28c20ff200c821d808d3f78403ddVirustotal results 40/68 (58.82%) 201.199.89.2238443Heodo
2019-05-25 00:53:384412fff75b7a0b7e976129f0c7b7328fVirustotal results 49/72 (68.06%) 201.199.89.2238443Heodo
2019-05-18 13:48:07b9642c28b98544d3f4643b443e385d1dVirustotal results 18/69 (26.09%) 201.199.89.2238443Heodo
2019-05-17 00:33:47884b527546723b660017495c8afd768aVirustotal results 39/73 (53.42%) 201.199.89.2238443Heodo
2019-05-16 22:36:2606eb6779b66bb37b3d26d543e2412f18Virustotal results 42/74 (56.76%) 201.199.89.2238443Heodo
2019-05-16 05:00:30deddbe2847c338d79d4ea185703437f2Virustotal results 51/72 (70.83%) 201.199.89.2238443Heodo
2019-05-11 17:05:069f2abb8908a79f0b40483c69355b61f9Virustotal results 44/71 (61.97%) 201.199.89.2238443Heodo
2019-05-10 05:36:05980f4868935345047b86d76bc48ba4b1Virustotal results 33/72 (45.83%) 201.199.89.2238443Heodo
2019-05-10 03:30:1364d5422970a982a9c55d018fb3745892Virustotal results 28/72 (38.89%) 201.199.89.2238443Heodo

# of malware samples: 28