Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 60.212.12.177. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:60.212.12.177
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL427398
Malware:Heodo -
AS number:AS4837
AS name:CHINA169-BACKBONE CHINA UNICOM China169 Backbone
Country:- CN
First seen:2018-12-19 09:47:10 UTC
Last seen:2018-12-20 15:44:54 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-12-21 08:43:28a849c60eb2e9eddbc540fe0bd17a8545Virustotal results 36/59 (61.02%) 60.212.12.17720Heodo
2018-12-21 07:24:09f9fcb23a461c14adb0d2eb08913b212cVirustotal results 37/60 (61.67%) 60.212.12.17720Heodo
2018-12-21 07:09:3189441a581462de041bb75be2d5825698Virustotal results 36/60 (60.00%) 60.212.12.17720Heodo
2018-12-21 07:01:4179a0bfeb0ded0cf8fdb906e7a9b94b16Virustotal results 37/60 (61.67%) 60.212.12.17720Heodo
2018-12-21 06:42:3833dbff0792c4d4ed4e930b1780fef34dVirustotal results 15/59 (25.42%) 60.212.12.17720Heodo

# of malware samples: 5