Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 221.165.123.72. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:221.165.123.72
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS4766
AS name:KIXS-AS-KR Korea Telecom
Country:- KR
First seen:2020-01-09 23:00:29 UTC
Last seen:2020-01-22 14:52:15 UTC
Last online:2020-01-19

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-01-25 03:47:203e913f4c0adf4da641c86567d076a16dVirustotal results 23 / 73 (31.51%) 221.165.123.7280Heodo
2020-01-19 05:55:56ac7bea90bfa1c7a88223545e1f9b00c4Virustotal results 45 / 69 (65.22%) 221.165.123.7280Heodo
2020-01-17 22:02:28ad1fb794d141ffbfca7ece3b13326a82Virustotal results 37 / 71 (52.11%) 221.165.123.7280Heodo
2020-01-16 14:13:029fe3a159f719546d2dd198bb06a87b53n/a221.165.123.7280Heodo
2020-01-16 01:42:2387d9a11ace3dc45891d6d38194e2c17eVirustotal results 41 / 71 (57.75%) 221.165.123.7280Heodo
2020-01-14 12:52:575517b7c3ed752568fc2f0548fcf81c80Virustotal results 42 / 72 (58.33%) 221.165.123.7280Heodo
2020-01-14 10:29:246c9899569d90f57d3fcd78c59126f248Virustotal results 34 / 72 (47.22%) 221.165.123.7280Heodo
2020-01-14 10:15:267bc4e94784ee9cb3a7e88c113bd9961bVirustotal results 35 / 72 (48.61%) 221.165.123.7280Heodo
2020-01-13 17:47:0958ee21fac2c3782bceeeb2a32f065097Virustotal results 12 / 62 (19.35%) 221.165.123.7280Heodo
2020-01-13 17:41:070bb24acded278324e8fc17552566a16aVirustotal results 11 / 61 (18.03%) 221.165.123.7280Heodo
2020-01-13 17:18:2899622008279188445736285f40339c37Virustotal results 11 / 61 (18.03%) 221.165.123.7280Heodo
2020-01-13 17:15:50bdc19a984b5354ef0cff72a2b38f6e45Virustotal results 12 / 62 (19.35%) 221.165.123.7280Heodo
2020-01-13 17:03:48183c6c695c1e26e209beac9bfd962b64Virustotal results 12 / 62 (19.35%) 221.165.123.7280Heodo
2020-01-13 16:36:52244fc91dce31d4e6e6b60d48d074ecaeVirustotal results 12 / 60 (20.00%) 221.165.123.7280Heodo
2020-01-13 16:30:338cabbf88765958964cf3a59c4dae8be9Virustotal results 23 / 73 (31.51%) 221.165.123.7280Heodo
2020-01-13 16:29:55bd898457306463937578445439992991Virustotal results 12 / 60 (20.00%) 221.165.123.7280Heodo
2020-01-13 15:44:13a4967f8d326ec7649a6ebadba9b06b88n/a221.165.123.7280Heodo
2020-01-13 15:39:5981b84413c0cd4b0561d3dfe96fd82825n/a221.165.123.7280Heodo
2020-01-13 15:28:1915591a8351ac67c327877ee6f5ae334en/a221.165.123.7280Heodo
2020-01-13 15:22:327ad8f3b53dbb5a57d250c93beadb95b1Virustotal results 12 / 59 (20.34%) 221.165.123.7280Heodo
2020-01-13 15:20:261c9eedbb389e2b4f531ed9f26417d4d7Virustotal results 12 / 62 (19.35%) 221.165.123.7280Heodo
2020-01-13 15:19:011e0d0d07a697e6d0c4384cef98fc7f1fn/a221.165.123.7280Heodo
2020-01-13 14:26:19aead1225141fadd849a27de8a27d16ben/a221.165.123.7280Heodo

# of malware samples: 23