Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 220.78.29.88. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:220.78.29.88
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS4766
AS name:KIXS-AS-KR Korea Telecom
Country:- KR
First seen:2019-12-17 22:07:03 UTC
Last seen:2019-12-22 09:34:53 UTC
Last online:2020-01-08

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-12-22 14:09:48aa5f3a68029acf6b2d307b54ebef0f4fVirustotal results 19 / 71 (26.76%) 220.78.29.8880Heodo
2019-12-22 12:47:19b2bcfcfcad3f02139211128ca420e2dcVirustotal results 16 / 72 (22.22%) 220.78.29.8880Heodo
2019-12-22 02:12:33a1cfe0757ae955df3a6fc591597c2546Virustotal results 13 / 72 (18.06%) 220.78.29.8880Heodo
2019-12-19 11:11:36ce930d05e55f6c04caf13f54fad6f1ccVirustotal results 26 / 57 (45.61%) 220.78.29.8880Heodo
2019-12-19 03:18:17e02710f8fce6c51754a40bde068d0623n/a220.78.29.8880Heodo
2019-12-18 10:55:02e11739f50da919ddc609425d88eff664Virustotal results 14 / 72 (19.44%) 220.78.29.8880Heodo
2019-12-18 07:38:5392ca721a406ef5cf1715c594a0e706a2Virustotal results 12 / 71 (16.90%) 220.78.29.8880Heodo
2019-12-18 07:36:091b8b9a3abbdd8186e3d2689bad63ef0dVirustotal results 15 / 69 (21.74%) 220.78.29.8880Heodo
2019-12-18 06:21:30082abe582c6789ce2527e2e24e9f2ea0Virustotal results 12 / 71 (16.90%) 220.78.29.8880Heodo
2019-12-18 05:32:40a61f0e84efa2f7de0cf4c7f9166f40c6Virustotal results 14 / 71 (19.72%) 220.78.29.8880Heodo
2019-12-18 05:32:12bf063d47c90b201e938e7c521351ac2en/a220.78.29.8880Heodo
2019-12-17 22:17:440ae6c238790c05e4537e8c12de987193Virustotal results 20 / 71 (28.17%) 220.78.29.8880Heodo
2019-12-17 22:16:434815c094fff68993e36b6638c96d96c2Virustotal results 21 / 67 (31.34%) 220.78.29.8880Heodo

# of malware samples: 13