Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 5.9.128.163. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:5.9.128.163
Hostname:likop.org
Status:- Online
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS24940
AS name:HETZNER-AS
Country:- DE
First seen:2018-12-20 23:07:26 UTC
Last seen:2019-03-21 22:35:00 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-03-22 07:50:43555668f58cb7035645e275eeb0e5e82dVirustotal results 48/70 (68.57%) 5.9.128.1638080Heodo
2019-03-21 18:34:55fbb121b350b2543b5f8abf5aad9beffbVirustotal results 25/67 (37.31%) 5.9.128.1638080Heodo
2019-03-21 08:45:47cf3fc6e3e8ebbada30e49cba87b830b7Virustotal results 45/65 (69.23%) 5.9.128.1638080Heodo
2019-03-20 15:06:407a797f22e462c6d4a3eeab5664407da6Virustotal results 14/66 (21.21%) 5.9.128.1638080Heodo
2019-03-20 10:26:32e75315f561974754714a285564e11d3eVirustotal results 11/68 (16.18%) 5.9.128.1638080Heodo
2019-03-20 05:14:0406baac635bc6fa81a3aa3d928c11645fVirustotal results 33/71 (46.48%) 5.9.128.1638080Heodo
2019-03-19 22:19:4338e4bb8b6bc00ea393d4dd03d5199a6dn/a5.9.128.1638080Heodo
2019-03-19 22:12:06d77f516e5aee4638a23022cf738eddd0Virustotal results 12/64 (18.75%) 5.9.128.1638080Heodo
2019-03-19 21:11:491fa8b8797f082d9ef9a4b6eadf6987b1Virustotal results 16/68 (23.53%) 5.9.128.1638080Heodo
2019-03-19 15:36:32931db1890c6b8a9bc82310412c643ba1Virustotal results 31/65 (47.69%) 5.9.128.1638080Heodo
2019-03-19 12:47:334bddff04e71010d67aeec9d204ee1ebaVirustotal results 20/65 (30.77%) 5.9.128.1638080Heodo
2019-03-19 04:11:538b516a949b6a9c8692f7f653cb76f2c2Virustotal results 14/65 (21.54%) 5.9.128.1638080Heodo
2019-03-18 21:56:30f8fbe966484cb22bf8a908b4cfcbaea9Virustotal results 30/67 (44.78%) 5.9.128.1638080Heodo
2019-03-18 20:01:4256299dbf6be6289049a15efeace46091Virustotal results 17/68 (25.00%) 5.9.128.1638080Heodo
2019-03-17 13:56:008a4f43357d6e8e4cdcf74e14a54d290fn/a5.9.128.1638080Heodo
2019-03-17 00:20:1042649551f3d9f7d69f88f28a20f7416bVirustotal results 23/66 (34.85%) 5.9.128.1638080Heodo
2019-03-17 00:20:069b64c934e4702d6f253992be1645fadaVirustotal results 34/66 (51.52%) 5.9.128.1638080Heodo
2019-03-17 00:18:48f8c4ac12885531e891b6eeaa3f600a90Virustotal results 23/64 (35.94%) 5.9.128.1638080Heodo
2019-03-16 23:52:1002175276c6a5da930d0cb10f64bf25beVirustotal results 23/64 (35.94%) 5.9.128.1638080Heodo
2019-03-16 23:52:0431c7ff4575f306396612b9641d3db416Virustotal results 37/70 (52.86%) 5.9.128.1638080Heodo
2019-03-16 23:50:1496bc90f9f1ca1b0b99cda0a16cdf9af9Virustotal results 23/65 (35.38%) 5.9.128.1638080Heodo
2019-03-16 23:47:436fc3be68848aed9fa116c98dce989bd3Virustotal results 23/64 (35.94%) 5.9.128.1638080Heodo
2019-03-16 23:27:3161768177018ef7983fb3cc60fc2ca716Virustotal results 23/65 (35.38%) 5.9.128.1638080Heodo
2019-03-16 23:18:499ac90f48e06db0de3b60cae8773b65f3Virustotal results 35/65 (53.85%) 5.9.128.1638080Heodo
2019-03-15 02:43:0076d46d577985597d9466d23505f8d260Virustotal results 23/66 (34.85%) 5.9.128.1638080Heodo
2019-03-12 18:17:533912074d5a87c7e44ebceddbbb268463Virustotal results 50/71 (70.42%) 5.9.128.1638080Heodo
2019-03-12 14:57:086430121c34513fe7059b7e5ab3800cd8Virustotal results 39/63 (61.90%) 5.9.128.1638080Heodo
2019-03-12 13:23:04cc85f076e7e82a0e4c1922881ecc2d27Virustotal results 35/64 (54.69%) 5.9.128.1638080Heodo
2019-03-12 11:48:06d1e1fd668b88bdf114d9a95af3af8a49Virustotal results 21/70 (30.00%) 5.9.128.1638080Heodo
2019-03-12 06:44:486cf8ca587aa20e3bf617d93320c69702Virustotal results 40/66 (60.61%) 5.9.128.1638080Heodo
2019-03-12 06:21:17246f18dd518b071ae4f5fb0b5cd993edVirustotal results 15/64 (23.44%) 5.9.128.1638080Heodo
2019-03-12 03:52:20cece3cfff96362bf3443a1047b65ce55Virustotal results 15/65 (23.08%) 5.9.128.1638080Heodo
2019-03-11 20:29:381b668a647b7e20a3de9a8efb2b7df620Virustotal results 41/64 (64.06%) 5.9.128.1638080Heodo
2019-03-11 20:20:21276cbf118a0f6b429af5582634beba7cVirustotal results 12/65 (18.46%) 5.9.128.1638080Heodo
2019-03-11 20:13:489704109777fb739f576ffc228f6a53eeVirustotal results 14/65 (21.54%) 5.9.128.1638080Heodo
2019-03-11 20:08:20a2873303c54b1c604ada27c88eb1c816Virustotal results 20/66 (30.30%) 5.9.128.1638080Heodo
2019-03-11 19:53:12d3c328ff792723b2c3613dc0d32a2372Virustotal results 17/69 (24.64%) 5.9.128.1638080Heodo
2019-03-09 23:18:2226f4fd34609eeffb301ce78e59bf738dVirustotal results 25/67 (37.31%) 5.9.128.1638080Heodo
2019-03-08 15:43:24280e35bff43ee67ca4745853a4867dd9Virustotal results 14/65 (21.54%) 5.9.128.1638080Heodo
2019-03-08 11:47:45980af41eba0f236bd38a75b48b6f1befVirustotal results 33/68 (48.53%) 5.9.128.1638080Heodo
2019-03-08 11:42:06ee3959465db21447afa6af68f955d3b6Virustotal results 19/64 (29.69%) 5.9.128.1638080Heodo
2019-03-08 08:41:59489ad3a04df0352ff51765cfa309deb6Virustotal results 33/64 (51.56%) 5.9.128.1638080Heodo
2019-03-08 06:09:0156f57f72ecc26bfc85d20fe59a770503Virustotal results 39/65 (60.00%) 5.9.128.1638080Heodo
2019-03-08 04:44:44f848beb25291854d58b2615fc6dafbb5Virustotal results 16/65 (24.62%) 5.9.128.1638080Heodo
2019-03-08 04:23:316a6574c983f71307c2b3a8e4ade259b9Virustotal results 36/63 (57.14%) 5.9.128.1638080Heodo
2019-03-06 11:22:19bdfcb9d85c5e54b08f56d5ac3a13789fVirustotal results 11/67 (16.42%) 5.9.128.1638080Heodo
2019-03-06 09:57:349dd207bb9abf2abfacc10408357695a2Virustotal results 15/65 (23.08%) 5.9.128.1638080Heodo
2019-03-05 19:42:460848b943a48cc4c8b7465e86cdd2f580Virustotal results 16/70 (22.86%) 5.9.128.1638080Heodo
2019-03-05 13:52:16f50b2fa15414b3509662237d69fd3e35Virustotal results 24/68 (35.29%) 5.9.128.1638080Heodo
2019-03-05 12:29:12adf6ba63bdb4e6feaf39e3c7caaa85a1Virustotal results 42/63 (66.67%) 5.9.128.1638080Heodo
2019-02-27 20:35:12df3a0e167d2e8f4828803866de9d347dVirustotal results 41/63 (65.08%) 5.9.128.1638080Heodo
2019-02-27 18:44:321be980829fcb7fd2a9fca7906bf2799bVirustotal results 9/63 (14.29%) 5.9.128.1638080Heodo
2018-12-21 08:43:5415938f5f7477d2578bb0032c2e00ec4fVirustotal results 20/70 (28.57%) 5.9.128.1638080Heodo

# of malware samples: 53