Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 99.252.27.6. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:99.252.27.6
Hostname:CPE00fc8d51ddc3-CM00fc8d51ddc0.cpe.net.cable.rogers.com
Status:- Online
Spamhaus SBL:SBL471114
Malware:Heodo -
AS number:AS812
AS name:ROGERS-COMMUNICATIONS - Rogers Communications Canada Inc.
Country:- CA
First seen:2019-12-17 07:52:16 UTC
Last seen:2020-01-18 11:12:56 UTC
Last online:2020-01-19

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-01-18 11:34:1268c124fb5da07f896423ca07a315ac55Virustotal results 21 / 73 (28.77%) 99.252.27.680Heodo
2020-01-18 11:23:54893058700637ed8dd97fc350bc7d6a37Virustotal results 21 / 73 (28.77%) 99.252.27.680Heodo
2020-01-18 11:19:49512dcb22b150444b1387f04b6c0917abVirustotal results 49 / 71 (69.01%) 99.252.27.680Heodo
2020-01-18 04:23:28324c7d3fa32cb47f4dc8527103e45e50Virustotal results 29 / 72 (40.28%) 99.252.27.680Heodo
2020-01-17 16:41:502c3bc268260ef0857827842a548dffa1Virustotal results 12 / 73 (16.44%) 99.252.27.680Heodo
2020-01-17 16:23:35f17498d70c45f606ca3fee368b7e339eVirustotal results 16 / 71 (22.54%) 99.252.27.680Heodo
2020-01-17 15:19:33152a509a842106e28278221354787fdeVirustotal results 14 / 71 (19.72%) 99.252.27.680Heodo
2020-01-17 15:16:3175ef59608d753b5fad96e9846c20b90dVirustotal results 13 / 73 (17.81%) 99.252.27.680Heodo
2020-01-17 14:41:30c364c49daad17c824a82530ab0482534Virustotal results 29 / 72 (40.28%) 99.252.27.680Heodo
2020-01-17 13:17:50ad868331f87b36a15a755ff6f78bd1a3Virustotal results 12 / 62 (19.35%) 99.252.27.680Heodo
2020-01-17 12:11:47468dc7208ba1512226f58424915f29b6Virustotal results 12 / 62 (19.35%) 99.252.27.680Heodo
2020-01-17 11:33:218cd66098894ee256ee604e30fd6ead64Virustotal results 11 / 60 (18.33%) 99.252.27.680Heodo
2020-01-17 11:27:4611ada780863bd807a5e10c18e23334f6Virustotal results 26 / 61 (42.62%) 99.252.27.680Heodo
2020-01-17 11:21:26c620e3ce46aeac7d526b38b8c3615581Virustotal results 14 / 72 (19.44%) 99.252.27.680Heodo
2020-01-17 07:50:25f55394a40a188d6d2076ba5f976e460fVirustotal results 14 / 73 (19.18%) 99.252.27.680Heodo
2020-01-17 07:47:24626443e7efd12938d1e5fb55424786e8Virustotal results 26 / 61 (42.62%) 99.252.27.680Heodo
2020-01-17 07:46:1559eb41289574bda4fdf86f6e0278d58dVirustotal results 26 / 60 (43.33%) 99.252.27.680Heodo
2020-01-17 07:45:209999ac305d313674e3df2bd3b75fdd24Virustotal results 26 / 60 (43.33%) 99.252.27.680Heodo
2020-01-17 07:44:11a92f106a7708de2c341deb96d977d507Virustotal results 26 / 61 (42.62%) 99.252.27.680Heodo
2020-01-17 07:40:58533ae009c2fce424c82b5b7063aad75aVirustotal results 14 / 72 (19.44%) 99.252.27.680Heodo
2020-01-17 07:35:53a0655c77af56629a0629c9dcbe2cd15aVirustotal results 27 / 61 (44.26%) 99.252.27.680Heodo
2020-01-17 07:35:001b80798059372d38385f731bfe500560Virustotal results 13 / 71 (18.31%) 99.252.27.680Heodo
2020-01-17 05:52:3878fb1358df759117e982b2c188047f13Virustotal results 25 / 61 (40.98%) 99.252.27.680Heodo
2020-01-17 04:51:508673ed992e56f4516c71f236a38dae3eVirustotal results 14 / 54 (25.93%) 99.252.27.680Heodo
2020-01-17 04:32:43e8e496f9bb93639a23d4ae8e049b71c8Virustotal results 25 / 61 (40.98%) 99.252.27.680Heodo
2020-01-17 04:31:58bf6a8e752be065b809aaca7871a6ad85Virustotal results 24 / 62 (38.71%) 99.252.27.680Heodo
2020-01-17 04:01:024daa579eaa490503e752b2e198fbd812Virustotal results 22 / 60 (36.67%) 99.252.27.680Heodo
2020-01-17 02:58:043ccbff553521ec77809da6557d46255cn/a99.252.27.680Heodo
2020-01-17 02:31:21b747d3f8aae5d0c8f11915bca02b0b2eVirustotal results 22 / 59 (37.29%) 99.252.27.680Heodo
2020-01-17 02:26:16bf07ee91994299f490cec4565167c682Virustotal results 11 / 73 (15.07%) 99.252.27.680Heodo
2020-01-17 02:18:56959f122fa905dbb501c8b860380429e8n/a99.252.27.680Heodo
2020-01-17 02:10:0357601f76cb2c64e91fd2b560041bd58fVirustotal results 11 / 73 (15.07%) 99.252.27.680Heodo
2020-01-17 01:43:36842ba27a67877187693e3cd168dd19e8Virustotal results 19 / 61 (31.15%) 99.252.27.680Heodo
2020-01-17 01:38:50470f00441094be2e3a092d02b1ae74fbVirustotal results 18 / 57 (31.58%) 99.252.27.680Heodo
2020-01-17 01:24:55761ef4044322a860a211a741ab1e3bfdVirustotal results 17 / 61 (27.87%) 99.252.27.680Heodo
2020-01-17 01:19:23ceac39f153f167e46a8b6d8460c73a25Virustotal results 17 / 61 (27.87%) 99.252.27.680Heodo
2020-01-17 01:03:31a907d1a756348a0d41081fb8d1411b2bVirustotal results 16 / 58 (27.59%) 99.252.27.680Heodo
2020-01-17 01:00:31bb9f1b82b06c2eeb744ea3cdb514db6eVirustotal results 20 / 62 (32.26%) 99.252.27.680Heodo
2020-01-17 00:51:5382ea582d3529066d9baeaa1096fb518aVirustotal results 17 / 61 (27.87%) 99.252.27.680Heodo
2020-01-17 00:48:40ef7f2d73e60d5b66924930f4db206131Virustotal results 20 / 61 (32.79%) 99.252.27.680Heodo
2020-01-17 00:43:15fb1c9831a02f1d7c0b2bd43b1f0467a1Virustotal results 23 / 62 (37.10%) 99.252.27.680Heodo
2020-01-17 00:26:2997c2be9ea8f53076033959c08c1e8a87n/a99.252.27.680Heodo
2020-01-17 00:24:1113f6b1897ea0f05d23cf1a1837b81890Virustotal results 19 / 61 (31.15%) 99.252.27.680Heodo
2020-01-17 00:04:511d0800a3c06dcd3963cf0477ae30950cVirustotal results 16 / 61 (26.23%) 99.252.27.680Heodo
2020-01-16 23:55:16e50adf3f961eb797140068af4467cd8an/a99.252.27.680Heodo
2020-01-16 23:51:43bc7b3802bafe1c07f22eef84f70b68c0n/a99.252.27.680Heodo
2020-01-16 23:38:42aa33e71f07e15fd662039ef4fa6c4dfeVirustotal results 19 / 58 (32.76%) 99.252.27.680Heodo
2020-01-16 22:43:31582991ac65cdcd98ffa04f2e6cdb5891Virustotal results 6 / 73 (8.22%) 99.252.27.680Heodo
2020-01-16 22:42:42c2c5b9fd5f49d515b6c149686480cefan/a99.252.27.680Heodo
2020-01-16 22:22:2909eb12bc1777ea6407b3de02f472a584Virustotal results 20 / 61 (32.79%) 99.252.27.680Heodo
2020-01-16 22:17:543f7dda32454675f6cfd370c4a6b1f1a4Virustotal results 20 / 62 (32.26%) 99.252.27.680Heodo
2020-01-16 22:17:14526e0ce9bf380e29295c9153e93876f1Virustotal results 20 / 59 (33.90%) 99.252.27.680Heodo
2020-01-16 22:01:30a00dc49627e3fe661d6e38efaf0d5359Virustotal results 20 / 61 (32.79%) 99.252.27.680Heodo
2020-01-16 21:56:40660f15f161d7797faed0b08ba0db1c11Virustotal results 6 / 73 (8.22%) 99.252.27.680Heodo
2020-01-16 21:49:586a6a87f5588dd937b34d4be27291d59cn/a99.252.27.680Heodo
2020-01-16 21:48:56a2ffeee8de85479d8d427fcb39a6c504Virustotal results 20 / 60 (33.33%) 99.252.27.680Heodo
2020-01-16 21:47:23b0d2b6f69efe28f305e77dfabb4ec3a4n/a99.252.27.680Heodo
2020-01-16 21:43:528f6068823878486759ef2c6e3381d5beVirustotal results 21 / 59 (35.59%) 99.252.27.680Heodo
2020-01-16 21:39:4810838b6d135ccf42989d1daafc4a33e3Virustotal results 21 / 61 (34.43%) 99.252.27.680Heodo
2020-01-16 20:09:25faedc16fe416a299700b15a833993a3aVirustotal results 9 / 72 (12.50%) 99.252.27.680Heodo
2020-01-16 20:02:2819d399da18b90d2741759d07871783e6Virustotal results 8 / 73 (10.96%) 99.252.27.680Heodo
2020-01-16 19:32:01c34431408046b01bc6b9edaaa26ef70fVirustotal results 9 / 73 (12.33%) 99.252.27.680Heodo
2020-01-16 19:29:060533e35887fab5c2082a8a2775449eb3Virustotal results 38 / 71 (53.52%) 99.252.27.680Heodo
2020-01-16 18:59:37b60bc7f7b47be2410d1852b6e6be279cVirustotal results 9 / 73 (12.33%) 99.252.27.680Heodo
2020-01-16 17:22:4185e08d02c5f0182204f8a6af4c8158e9n/a99.252.27.680Heodo
2020-01-16 06:17:11167189664bd3af6bc95eec7735a59c8an/a99.252.27.680Heodo
2020-01-16 04:26:48875511b6859e7701130ec3d40dfe33e0Virustotal results 44 / 72 (61.11%) 99.252.27.680Heodo
2020-01-16 03:52:421d0fd6d60e3a65fe6e8805145c4616eeVirustotal results 44 / 72 (61.11%) 99.252.27.680Heodo
2020-01-16 03:43:42db95d3b32e6a2deb140d6d9a452c6a27Virustotal results 42 / 71 (59.15%) 99.252.27.680Heodo
2020-01-15 20:38:59a44a5df60313e009659b8561b58e93eaVirustotal results 33 / 72 (45.83%) 99.252.27.680Heodo
2020-01-15 19:05:25a3d074793f6b8e168438313f8c66aad7Virustotal results 44 / 72 (61.11%) 99.252.27.680Heodo
2020-01-15 16:59:50a24ea8c31a6c4d766c82393c4b4c64d4Virustotal results 40 / 73 (54.79%) 99.252.27.680Heodo
2020-01-14 16:35:43855b902fd84af6eebbac51416a1ca08bVirustotal results 26 / 73 (35.62%) 99.252.27.680Heodo
2020-01-14 16:33:53acc878915d40bd06a0a6082c818acb00Virustotal results 22 / 71 (30.99%) 99.252.27.680Heodo
2020-01-14 16:32:5856c8ef6723bf99fa6779261cfcb7dd8cVirustotal results 23 / 70 (32.86%) 99.252.27.680Heodo
2020-01-14 16:30:59c1d9d446ca51c142032c4e51d3514d2cVirustotal results 25 / 73 (34.25%) 99.252.27.680Heodo
2020-01-14 16:25:086dbb610a1f5c60696dbb914754a53a6eVirustotal results 22 / 71 (30.99%) 99.252.27.680Heodo
2020-01-14 16:21:366bab3a0f5c3c691b88c4c76a47d01ba6Virustotal results 24 / 70 (34.29%) 99.252.27.680Heodo
2020-01-14 16:20:1526adc071a1ac0478113a7cb5cf1adeb5Virustotal results 23 / 71 (32.39%) 99.252.27.680Heodo
2020-01-14 16:09:581745499b41f4f0acab446c6dec0bb2baVirustotal results 25 / 72 (34.72%) 99.252.27.680Heodo
2020-01-14 15:40:12202f54190e50bfa116fc4a96c3686356Virustotal results 30 / 60 (50.00%) 99.252.27.680Heodo
2020-01-14 15:34:13e7ecbeab17c5b6a58a906a1a5df4e389Virustotal results 30 / 61 (49.18%) 99.252.27.680Heodo
2020-01-14 15:34:02330287c7386c44cc4e25fee0a7dcd598Virustotal results 30 / 59 (50.85%) 99.252.27.680Heodo
2020-01-14 15:33:528c04a291704a99f84d990e0448334fcaVirustotal results 30 / 62 (48.39%) 99.252.27.680Heodo
2020-01-14 15:32:3260c35bb60588ed44cde0271cae8d26c6Virustotal results 30 / 61 (49.18%) 99.252.27.680Heodo
2020-01-14 15:31:386d73323ddcc4bd84bf38a3722bf72311Virustotal results 30 / 62 (48.39%) 99.252.27.680Heodo
2020-01-14 15:31:29e44ab7f4dc48ee97be662eaacbf1792fVirustotal results 33 / 61 (54.10%) 99.252.27.680Heodo
2020-01-14 15:31:1554a7cb1660a812e96a56168aa175f03eVirustotal results 30 / 62 (48.39%) 99.252.27.680Heodo
2020-01-14 15:30:41ae4053be22643c7efd42eb6d358465aaVirustotal results 31 / 60 (51.67%) 99.252.27.680Heodo
2020-01-14 15:19:38e5bf4f3d04b82a5c71e19043341bedc7Virustotal results 11 / 62 (17.74%) 99.252.27.680Heodo
2020-01-14 15:18:24f14e7c6286785255c63deb59c2e6f46aVirustotal results 32 / 58 (55.17%) 99.252.27.680Heodo
2020-01-14 15:14:21085d8559ad34c2a38ac55b5d726a1702Virustotal results 33 / 61 (54.10%) 99.252.27.680Heodo
2020-01-14 15:12:06c4c12e4eee81135016ffa525a4ae31c2Virustotal results 12 / 59 (20.34%) 99.252.27.680Heodo
2020-01-14 15:10:44810a2cf7dec3dcb4eb6355a23279fd0bVirustotal results 33 / 62 (53.23%) 99.252.27.680Heodo
2020-01-14 15:07:57abd32afa609f40b5c9e4f554c2541dbaVirustotal results 31 / 61 (50.82%) 99.252.27.680Heodo
2020-01-14 15:06:09d077cbc31dcdc47d131fba693ebbcab2Virustotal results 31 / 60 (51.67%) 99.252.27.680Heodo
2020-01-14 15:05:46dad9dee49b416aa0a7166ac603e77ad9Virustotal results 29 / 61 (47.54%) 99.252.27.680Heodo
2020-01-14 15:01:54d8b14f4734951a333eeb45beb9a38a77Virustotal results 32 / 59 (54.24%) 99.252.27.680Heodo
2020-01-14 15:01:376fd9adcb77d52ccab1faf9518b2114bdVirustotal results 32 / 60 (53.33%) 99.252.27.680Heodo
2020-01-14 15:00:2156c4b5a6ed6e8d1074fcdeef148cf269Virustotal results 32 / 61 (52.46%) 99.252.27.680Heodo
2020-01-14 15:00:2156c4b5a6ed6e8d1074fcdeef148cf269Virustotal results 32 / 61 (52.46%) 99.252.27.680Heodo
2020-01-14 14:54:39cbe5d2a0c618a95c358a0cc1979b911cVirustotal results 33 / 61 (54.10%) 99.252.27.680Heodo
2020-01-14 14:50:4091de89ce175206f1e799babb4966bfedVirustotal results 29 / 61 (47.54%) 99.252.27.680Heodo
2020-01-14 14:49:0900a53ae5b6a157ed07e5cb970b5f4418Virustotal results 30 / 60 (50.00%) 99.252.27.680Heodo
2020-01-14 14:39:28d3f795846f3742bcd0212e50200b9024Virustotal results 12 / 59 (20.34%) 99.252.27.680Heodo
2020-01-14 10:21:005ea7c6390a60c09ef14563e5df583b46Virustotal results 19 / 72 (26.39%) 99.252.27.680Heodo
2020-01-13 20:32:46008ba652bdb9768e6b2a1c0979dd2b73Virustotal results 12 / 61 (19.67%) 99.252.27.680Heodo
2020-01-09 17:27:25473610786664adeac7e94dc87faca550Virustotal results 60 / 72 (83.33%) 99.252.27.680Heodo
2019-12-21 14:58:22f02c307c4f6df7b7e16f134f10afa8feVirustotal results 12 / 71 (16.90%) 99.252.27.680Heodo
2019-12-21 14:57:12699ec2ab4fdc9fb0c1940fcef03acd40Virustotal results 11 / 69 (15.94%) 99.252.27.680Heodo
2019-12-21 14:56:06fabc96119475e63794326c50d8fb40f6Virustotal results 13 / 71 (18.31%) 99.252.27.680Heodo
2019-12-21 14:48:5797d123232aebb3d601004d9e78457f9fVirustotal results 18 / 67 (26.87%) 99.252.27.680Heodo
2019-12-21 14:47:1040574dae63e739e924990df201656d3aVirustotal results 12 / 72 (16.67%) 99.252.27.680Heodo
2019-12-21 14:46:5905117fdd64e03be8c01d33b4e3ca16bcVirustotal results 12 / 71 (16.90%) 99.252.27.680Heodo
2019-12-21 14:46:33ef2aec8c5743cad79fb97aa05b653f65Virustotal results 12 / 72 (16.67%) 99.252.27.680Heodo
2019-12-21 14:45:20f048087f59f417cac8cdf3d0ccc92618Virustotal results 13 / 71 (18.31%) 99.252.27.680Heodo
2019-12-21 14:33:26bb2f098eea290698fa7078651d7b7ff6Virustotal results 11 / 72 (15.28%) 99.252.27.680Heodo
2019-12-21 14:32:07481805a912605b64579976a8266209e9Virustotal results 12 / 69 (17.39%) 99.252.27.680Heodo
2019-12-21 10:41:04f8f4361c6a1d50d4f3f80de05ed86429Virustotal results 12 / 62 (19.35%) 99.252.27.680Heodo
2019-12-21 06:21:393b609e75cf34d9b864987e7a9bc9f8c7Virustotal results 11 / 72 (15.28%) 99.252.27.680Heodo
2019-12-20 20:44:3255a09d251da6ade4213fd89c5bc47b37Virustotal results 11 / 71 (15.49%) 99.252.27.680Heodo
2019-12-19 22:04:05a928e6439463fdd806ad2da0402260acVirustotal results 13 / 69 (18.84%) 99.252.27.680Heodo
2019-12-19 16:25:42a02943fc3daa3b2aabdca4d7abfd6365Virustotal results 8 / 72 (11.11%) 99.252.27.680Heodo
2019-12-18 16:05:325bdba24f3cb2d8c52ad068dcf2caf9c2Virustotal results 45 / 69 (65.22%) 99.252.27.680Heodo
2019-12-18 15:52:22472a13684d2042c0730f5a48c574baa1Virustotal results 15 / 72 (20.83%) 99.252.27.680Heodo
2019-12-18 07:15:19e6576341cd0d364f40ca4117347f9570Virustotal results 6 / 70 (8.57%) 99.252.27.680Heodo
2019-12-18 06:28:00b7bb2572c1c30722efb2eb456af80c08Virustotal results 7 / 72 (9.72%) 99.252.27.680Heodo
2019-12-18 06:25:37712a4a18a868ec35ebf0f100a82a3f20Virustotal results 9 / 72 (12.50%) 99.252.27.680Heodo
2019-12-18 05:57:52e3a6006d016fd1d1c5fcb488970250e6Virustotal results 9 / 72 (12.50%) 99.252.27.680Heodo
2019-12-17 22:04:473a1c981e62cfb6c740b9d66dcca5ca39Virustotal results 13 / 72 (18.06%) 99.252.27.680Heodo
2019-12-17 21:58:13ae86ab7bf8957b051e4957d60dc0e82cVirustotal results 10 / 72 (13.89%) 99.252.27.680Heodo
2019-12-17 19:29:280ee864accd79ba23dfe230fc852a5a71Virustotal results 9 / 72 (12.50%) 99.252.27.680Heodo
2019-12-17 19:27:124422f8cd189b6525e9fdd2edb81937eaVirustotal results 11 / 72 (15.28%) 99.252.27.680Heodo
2019-12-17 19:15:10b0b0594cdc2dc4be3f64dd993c324574Virustotal results 19 / 61 (31.15%) 99.252.27.680Heodo
2019-12-17 18:58:299dd78aa0e6cd37682227131fead5ce97Virustotal results 13 / 62 (20.97%) 99.252.27.680Heodo
2019-12-17 18:56:5431ab292cc3cf1271ce058e50de15fdecVirustotal results 13 / 72 (18.06%) 99.252.27.680Heodo
2019-12-17 18:13:35bfa18b093086a6b16ae094d072350ac4Virustotal results 13 / 61 (21.31%) 99.252.27.680Heodo
2019-12-17 17:36:164c8b9541f9d0bf16d4a725b500fd27feVirustotal results 11 / 72 (15.28%) 99.252.27.680Heodo
2019-12-17 17:00:12fb8cdc55199ec42960a35a18e9de8a97Virustotal results 19 / 60 (31.67%) 99.252.27.680Heodo
2019-12-17 17:00:12fb8cdc55199ec42960a35a18e9de8a97Virustotal results 19 / 60 (31.67%) 99.252.27.680Heodo
2019-12-17 16:45:287ab9a8c4c773f5077d1b6d9bd492672aVirustotal results 11 / 71 (15.49%) 99.252.27.680Heodo
2019-12-17 16:15:5956048c4419d431307f04343fbd93a3efVirustotal results 12 / 71 (16.90%) 99.252.27.680Heodo
2019-12-17 15:49:53369a014f093280b91a6c5a2c36e5ccf9Virustotal results 19 / 62 (30.65%) 99.252.27.680Heodo
2019-12-17 15:48:28a5567b1042b0a0a55ce7896762cfd834Virustotal results 15 / 71 (21.13%) 99.252.27.680Heodo
2019-12-17 15:40:0574dd533c9db322cc3a650601f6d4c9f6Virustotal results 12 / 59 (20.34%) 99.252.27.680Heodo
2019-12-17 13:32:51990a2908e20048656e95c91ac217cec6n/a99.252.27.680Heodo
2019-12-17 13:18:15c82a918b5c5ba44167f1687d96583f47Virustotal results 12 / 59 (20.34%) 99.252.27.680Heodo
2019-12-17 12:15:19c44caf779e225ba61bb8161be0a067ecVirustotal results 13 / 70 (18.57%) 99.252.27.680Heodo
2019-12-17 11:40:228f8564c1b626bceab327c5368e9f1590Virustotal results 24 / 70 (34.29%) 99.252.27.680Heodo
2019-12-17 11:28:23eec1dbf99c4840802e123d93b6f11281Virustotal results 12 / 70 (17.14%) 99.252.27.680Heodo
2019-12-17 10:49:02d27829b7b38f89fa80e555f936cf3397Virustotal results 11 / 72 (15.28%) 99.252.27.680Heodo

# of malware samples: 151