Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 27.109.153.201. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:27.109.153.201
Hostname:nz153l201.bb27109.ctm.net
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS4609
AS name:CTM-MO Companhia de Telecomunicacoes de Macau SARL
Country:- MO
First seen:2020-01-09 23:00:36 UTC
Last seen:2020-01-28 16:55:00 UTC
Last online:2020-01-17

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-02-06 08:13:147e486b6be9ba8ce18ad6d6635a5ce4b2Virustotal results 38 / 73 (52.05%) 27.109.153.2018090Heodo
2020-02-06 08:10:20ca74bd130b9e311a82ea8404793cd55eVirustotal results 35 / 72 (48.61%) 27.109.153.2018090Heodo
2020-02-06 07:23:02b9ea663ffcfe1152bd6e9a452a4eaf14Virustotal results 37 / 73 (50.68%) 27.109.153.2018090Heodo
2020-01-28 20:37:46928c203d40e0e0232de426f0810c7314Virustotal results 44 / 72 (61.11%) 27.109.153.2018090Heodo
2020-01-21 10:59:2350f70332b5d2e6d497bae8c898688f03Virustotal results 34 / 72 (47.22%) 27.109.153.2018090Heodo
2020-01-19 05:55:56ac7bea90bfa1c7a88223545e1f9b00c4Virustotal results 45 / 69 (65.22%) 27.109.153.2018090Heodo
2020-01-18 04:58:5438eb1c3853cb0631df16f464b8b3ceb8Virustotal results 13 / 61 (21.31%) 27.109.153.2018090Heodo
2020-01-17 22:02:28ad1fb794d141ffbfca7ece3b13326a82Virustotal results 37 / 71 (52.11%) 27.109.153.2018090Heodo
2020-01-17 20:36:21a4efabcfa180627fca81da64b8fe2acaVirustotal results 10 / 72 (13.89%) 27.109.153.2018090Heodo
2020-01-16 14:13:029fe3a159f719546d2dd198bb06a87b53n/a27.109.153.2018090Heodo
2020-01-16 01:54:49a35b0bc29d5a714d09e1b43e608951adVirustotal results 3 / 72 (4.17%) 27.109.153.2018090Heodo
2020-01-14 21:12:1694e4261d56368de48881ee3111e3340cn/a27.109.153.2018090Heodo

# of malware samples: 12