Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 59.20.65.102. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:59.20.65.102
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS4766
AS name:KIXS-AS-KR Korea Telecom
Country:- KR
First seen:2020-02-24 14:36:12 UTC
Last seen:2020-06-24 23:12:32 UTC
Last online:2020-06-08

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-06-25 13:35:428066161e34e6b90559133afa8aea3c30Virustotal results 40 / 73 (54.79%) 59.20.65.10280Heodo
2020-06-24 20:29:012e78934aa286af10ad2ba57bdaeeb4a9Virustotal results 38 / 73 (52.05%) 59.20.65.10280Heodo
2020-06-17 16:17:054bc30d9039f2275c53780e539f8b0d05Virustotal results 44 / 73 (60.27%) 59.20.65.10280Heodo
2020-06-17 13:23:443bd662b48aafd2aa6112783ad2ed9a35Virustotal results 45 / 74 (60.81%) 59.20.65.10280Heodo
2020-06-17 07:40:22274ad0e5fa92e2943e649c8bac6730b4Virustotal results 46 / 73 (63.01%) 59.20.65.10280Heodo
2020-06-15 18:21:36124c6fd871b832d12b6f76e4aa4dcb07Virustotal results 39 / 70 (55.71%) 59.20.65.10280Heodo
2020-05-17 00:47:398d256e86b333549f8eb5854b49435154Virustotal results 37 / 69 (53.62%) 59.20.65.10280Heodo
2020-05-17 00:40:358c06a887cad9d232202c72dda22c4fb1Virustotal results 25 / 72 (34.72%) 59.20.65.10280Heodo
2020-05-17 00:34:188b475fcd9d944f6471d026259c51234fVirustotal results 25 / 71 (35.21%) 59.20.65.10280Heodo
2020-05-17 00:32:1489e9d4312d8234bd33391df5527ce3a3n/a59.20.65.10280Heodo
2020-05-17 00:17:15870e0f781b02619dfb03bfd32e30bd4cVirustotal results 29 / 59 (49.15%) 59.20.65.10280Heodo
2020-05-09 14:05:5401cd42f724b8bbe0d395de2e37406500n/a59.20.65.10280Heodo
2020-04-28 20:36:511273ee8de13dd39def8af842b1b729baVirustotal results 41 / 72 (56.94%) 59.20.65.10280Heodo
2020-04-22 21:34:34da7d304be5fed4a47f985e8be42d0378n/a59.20.65.10280Heodo
2020-04-22 21:08:1617496ff4831602f24ebabccb912a0821n/a59.20.65.10280Heodo
2020-04-19 22:04:48230093bbfcbd95399f30fdae74e410dcVirustotal results 36 / 72 (50.00%) 59.20.65.10280Heodo
2020-04-19 07:06:200184730b4b9eeca740d347a9f2702b5aVirustotal results 11 / 70 (15.71%) 59.20.65.10280Heodo
2020-04-14 08:27:369df52380b30de674be411a6bdd882226Virustotal results 8 / 71 (11.27%) 59.20.65.10280Heodo
2020-04-13 18:54:522f0f8a59bee355a09b8d7040553a5903Virustotal results 12 / 72 (16.67%) 59.20.65.10280Heodo
2020-03-25 22:33:1736ed9437ae80079284518396ed377445n/a59.20.65.10280Heodo
2020-03-23 09:43:37b1e6a67a46978eb9c12c555572418eb8Virustotal results 56 / 72 (77.78%) 59.20.65.10280Heodo
2020-03-22 00:44:40a4708e15384ef20b7f3ba8a3c892df1cVirustotal results 26 / 73 (35.62%) 59.20.65.10280Heodo
2020-03-19 03:01:41ab2a6aed42eeedf41db6e291901abf34Virustotal results 46 / 72 (63.89%) 59.20.65.10280Heodo
2020-03-18 22:49:07ce576b1a87f3eb8f63a15b2445e696d4Virustotal results 20 / 72 (27.78%) 59.20.65.10280Heodo
2020-03-17 03:11:53fa33b498cd5c883112103e5fd23527cbn/a59.20.65.10280Heodo
2020-03-02 14:59:5393dfc3002bd8caba87601a30e43060d5n/a59.20.65.10280Heodo
2020-03-02 14:52:091cd6b536be6e5a056660b0b1793d176bn/a59.20.65.10280Heodo
2020-03-02 14:47:26adf5031ba8f77d514469e450f3c00d0bn/a59.20.65.10280Heodo
2020-03-02 14:45:436eb24699d68a12753917295065b8d08cn/a59.20.65.10280Heodo
2020-02-29 14:34:316f2c8566a19158c5ae860edf06e092e5n/a59.20.65.10280Heodo
2020-02-29 14:33:36e6b4292f70ab605131b56362e6cb6e0an/a59.20.65.10280Heodo
2020-02-29 14:32:048cfb3b2f41e2c80d867c831592f6fa3an/a59.20.65.10280Heodo
2020-02-29 14:26:34da6fe42877a2ccd403f51047f18f0357n/a59.20.65.10280Heodo
2020-02-29 14:21:03d2b0367014340a116dce78ab715e3c2fn/a59.20.65.10280Heodo
2020-02-29 14:20:50501331eb03570a049991d7e8558763f1n/a59.20.65.10280Heodo
2020-02-29 14:18:381a48ab8f8d774a1771f64d93374559can/a59.20.65.10280Heodo
2020-02-29 14:15:156a5395fe655f80c96e47ed176419b34cn/a59.20.65.10280Heodo
2020-02-29 14:13:234561c1bcf094034775a7946b99079affn/a59.20.65.10280Heodo
2020-02-29 14:11:44211dcd79d54d880474ac3a52d9c3e061n/a59.20.65.10280Heodo
2020-02-27 19:10:215d226b7a6caa9278de5ff827f59ab3d2Virustotal results 45 / 72 (62.50%) 59.20.65.10280Heodo
2020-02-25 15:51:4035bc41a3baac117faf9fe51e81a4a214Virustotal results 5 / 69 (7.25%) 59.20.65.10280Heodo

# of malware samples: 41