Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 213.14.166.152. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:213.14.166.152
Hostname:host-213-14-166-152.reverse.superonline.net
Status:Offline
Spamhaus SBL:SBL446161
Malware:Heodo -
AS number:AS34984
AS name:TELLCOM-AS
Country:- TR
First seen:2019-04-25 16:46:38 UTC
Last seen:2019-06-30 20:55:00 UTC
Last online:2019-05-31

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-07-01 12:11:07ec1bbdef909b80af451b6b172b7b2493Virustotal results 55/71 (77.46%) 213.14.166.152990Heodo
2019-05-06 00:24:35248aac9ef7a26af7df2c3c82f854b653Virustotal results 25/71 (35.21%) 213.14.166.152990Heodo
2019-05-05 15:21:43e275eba0bd280ee6119f5480579f79d2Virustotal results 38/72 (52.78%) 213.14.166.152990Heodo
2019-05-03 06:11:30a3eb0e40e228c49b6814e33ac153bca2Virustotal results 19/70 (27.14%) 213.14.166.152990Heodo
2019-05-03 01:34:325ad91c9037adc4ecc7e93228d7388266Virustotal results 42/73 (57.53%) 213.14.166.152990Heodo
2019-05-03 00:30:567b21f418f246855342e1845522b760a8Virustotal results 20/71 (28.17%) 213.14.166.152990Heodo
2019-05-03 00:00:115730cd1b4c2c2a562f91b36d7cd6ecf3Virustotal results 17/66 (25.76%) 213.14.166.152990Heodo
2019-05-02 16:55:1377ef6d5b86896bb1c65388bafc97869fVirustotal results 48/73 (65.75%) 213.14.166.152990Heodo
2019-05-02 14:52:43718584eb0a307bc1796cce6e8142540bVirustotal results 22/71 (30.99%) 213.14.166.152990Heodo
2019-05-02 13:39:331e820df3195c6632291bc503193bb75eVirustotal results 16/73 (21.92%) 213.14.166.152990Heodo
2019-05-02 13:21:42a27d84ba8158715b49c4496da22c648fVirustotal results 15/70 (21.43%) 213.14.166.152990Heodo
2019-05-02 10:41:0282284bb0dffcf2c5fa836281817f2427Virustotal results 54/72 (75.00%) 213.14.166.152990Heodo
2019-05-02 05:58:0655e041e1109bee397274ea2241b0aa53Virustotal results 22/72 (30.56%) 213.14.166.152990Heodo
2019-05-02 00:12:5449113e95864b398f83c199c076a09c09Virustotal results 22/71 (30.99%) 213.14.166.152990Heodo
2019-05-01 20:19:17609d0f95f6457ae2614dbcc0a8bb2bf8Virustotal results 16/72 (22.22%) 213.14.166.152990Heodo
2019-05-01 20:18:170390a68c6012b452a48e0489ac539733Virustotal results 18/71 (25.35%) 213.14.166.152990Heodo
2019-05-01 19:21:37b9189adfa347cf074bacc9dafe6e8336Virustotal results 32/71 (45.07%) 213.14.166.152990Heodo
2019-05-01 18:01:048f4832132bc05a0835d20be9b6b3abcfVirustotal results 47/72 (65.28%) 213.14.166.152990Heodo
2019-05-01 17:13:397d406b46e3a2d50a5d8b4978fc8cfdd1Virustotal results 15/70 (21.43%) 213.14.166.152990Heodo

# of malware samples: 19