Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 5.2.212.254. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:5.2.212.254
Hostname:static-5-2-212-254.rdsnet.ro
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS8708
AS name:RCS-RDS 73-75 Dr. Staicovici
Country:- RO
First seen:2020-11-08 02:04:10 UTC
Last seen:2020-11-23 23:44:52 UTC
Last online:2020-11-22

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-11-24 12:05:59a7e29418915b0b0c832a8634a7148b75n/a5.2.212.25480Heodo
2020-11-17 18:21:34c37589bb6040ebc5ed30a77c71fb6482n/a5.2.212.25480Heodo
2020-11-17 01:10:457eb014985450fb9d153433be103e97f2Virustotal results 48 / 70 (68.57%) 5.2.212.25480Heodo
2020-11-16 10:10:19b4e95eddd0ac3e0d7cbd64b61e23ac71Virustotal results 43 / 71 (60.56%) 5.2.212.25480Heodo
2020-11-16 06:33:298e2628ccc2fa2b385ac9121e584479eaVirustotal results 34 / 68 (50.00%) 5.2.212.25480Heodo
2020-11-14 19:38:22e5790bc4afbafeebbcaad1196f6de4c4n/a5.2.212.25480Heodo

# of malware samples: 6