Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 207.134.189.64. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:207.134.189.64
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS852
AS name:ASN852 - TELUS Communications Inc., CA
Country:- CA
First seen:2018-09-26 13:40:31 UTC
Last seen:2018-09-26 19:20:51 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-10-01 10:49:58f3c358c47e4987715fca5666fc9b5968Virustotal results 37/68 (54.41%) 207.134.189.6450000Heodo
2018-10-01 09:34:3396792dc08e193972565319248d65f7d1Virustotal results 39/69 (56.52%) 207.134.189.6450000Heodo
2018-09-30 20:19:19a4f00d6ecb9e720610ce89114440ccb0Virustotal results 42/69 (60.87%) 207.134.189.6450000Heodo
2018-09-30 18:25:245e57d24994f9512065435b7fe773ec84Virustotal results 42/68 (61.76%) 207.134.189.6450000Heodo
2018-09-28 09:08:4895240732d90027df7cb2c6c74804253bVirustotal results 14/67 (20.90%) 207.134.189.6450000Heodo
2018-09-28 07:40:201da9e321b4857c7ffc9e54a6449749c5Virustotal results 34/69 (49.28%) 207.134.189.6450000Heodo
2018-09-27 11:19:393ff0fc548ea75151fdaf76db29f70aedVirustotal results 17/69 (24.64%) 207.134.189.6450000Heodo
2018-09-27 09:35:02ee964197100d076072b6fdc5bfaf297bVirustotal results 17/67 (25.37%) 207.134.189.6450000Heodo

# of malware samples: 8