Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 59.20.65.102. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:59.20.65.102
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS4766
AS name:KIXS-AS-KR Korea Telecom
Country:- KR
First seen:2020-02-24 14:36:12 UTC
Last seen:2020-03-25 16:41:39 UTC
Last online:2020-03-26

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-03-25 22:33:1736ed9437ae80079284518396ed377445n/a59.20.65.10280Heodo
2020-03-23 09:43:37b1e6a67a46978eb9c12c555572418eb8Virustotal results 56 / 72 (77.78%) 59.20.65.10280Heodo
2020-03-22 00:44:40a4708e15384ef20b7f3ba8a3c892df1cVirustotal results 26 / 73 (35.62%) 59.20.65.10280Heodo
2020-03-19 03:01:41ab2a6aed42eeedf41db6e291901abf34Virustotal results 46 / 72 (63.89%) 59.20.65.10280Heodo
2020-03-18 22:49:07ce576b1a87f3eb8f63a15b2445e696d4Virustotal results 20 / 72 (27.78%) 59.20.65.10280Heodo
2020-03-17 03:11:53fa33b498cd5c883112103e5fd23527cbn/a59.20.65.10280Heodo
2020-03-02 14:59:5393dfc3002bd8caba87601a30e43060d5n/a59.20.65.10280Heodo
2020-03-02 14:52:091cd6b536be6e5a056660b0b1793d176bn/a59.20.65.10280Heodo
2020-03-02 14:47:26adf5031ba8f77d514469e450f3c00d0bn/a59.20.65.10280Heodo
2020-03-02 14:45:436eb24699d68a12753917295065b8d08cn/a59.20.65.10280Heodo
2020-02-29 14:34:316f2c8566a19158c5ae860edf06e092e5n/a59.20.65.10280Heodo
2020-02-29 14:33:36e6b4292f70ab605131b56362e6cb6e0an/a59.20.65.10280Heodo
2020-02-29 14:32:048cfb3b2f41e2c80d867c831592f6fa3an/a59.20.65.10280Heodo
2020-02-29 14:26:34da6fe42877a2ccd403f51047f18f0357n/a59.20.65.10280Heodo
2020-02-29 14:21:03d2b0367014340a116dce78ab715e3c2fn/a59.20.65.10280Heodo
2020-02-29 14:20:50501331eb03570a049991d7e8558763f1n/a59.20.65.10280Heodo
2020-02-29 14:18:381a48ab8f8d774a1771f64d93374559can/a59.20.65.10280Heodo
2020-02-29 14:15:156a5395fe655f80c96e47ed176419b34cn/a59.20.65.10280Heodo
2020-02-29 14:13:234561c1bcf094034775a7946b99079affn/a59.20.65.10280Heodo
2020-02-29 14:11:44211dcd79d54d880474ac3a52d9c3e061n/a59.20.65.10280Heodo
2020-02-27 19:10:215d226b7a6caa9278de5ff827f59ab3d2Virustotal results 45 / 72 (62.50%) 59.20.65.10280Heodo
2020-02-25 15:51:4035bc41a3baac117faf9fe51e81a4a214Virustotal results 5 / 69 (7.25%) 59.20.65.10280Heodo

# of malware samples: 22