Browse Botnet C&Cs
You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 81.215.192.201. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.
Database Entry
| Host: | 81.215.192.201 |
|---|---|
| Hostname: | 81.215.192.201.dynamic.ttnet.com.tr |
| Status: | Offline |
| Spamhaus SBL: | Not listed |
| Malware: | Heodo  |
| AS number: | AS9121 |
| AS name: | TTNET, TR |
| Country: |  TR |
| First seen: | 2018-09-21 09:51:14 UTC |
| Last seen: | 2018-10-08 11:14:05 UTC |
Malware Samples
The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Host | Port | Signature |
|---|---|---|---|---|---|
| 2018-10-09 09:23:42 | 0a68946c77994c4d555c4dfcfd2f7011 |  36/69 (52.17%)
| 81.215.192.201 | 80 | Heodo |
| 2018-10-08 11:14:05 | 8936adb78493425d2ae564a123739dc9 | 44/68 (64.71%)
| 81.215.192.201 | 80 | Heodo |
| 2018-10-02 15:01:18 | 94c3b92c49c880b3149841d8a8f954c2 | 44/69 (63.77%)
| 81.215.192.201 | 80 | Heodo |
| 2018-10-01 20:30:27 | e3dcf027da033e5a706f2377d6c988e7 | 39/69 (56.52%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-30 06:34:41 | cbdef3b550a24cdfbb96a7501337a14f | 39/69 (56.52%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-29 16:42:48 | 8d348881d8a862def48c618b62b2622d | 42/67 (62.69%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-26 17:42:36 | 4afd279b1b32755ceaecccb27bc7232e | 39/67 (58.21%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-25 13:35:19 | b8f4663c1294c9bc55e8f45c04895238 | 18/69 (26.09%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-25 13:18:25 | 85eab2d8592866c81fdee78b50f087b9 | 21/67 (31.34%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-24 17:49:47 | 0ff3565fa9efa3fdd5a02c56c3525277 | 21/68 (30.88%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-24 12:09:41 | 6d4458793a5e59a22a3ec0c435af3568 | 31/68 (45.59%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-24 07:53:24 | a0f91b379f17872beb8c8a9f3d887999 | 30/69 (43.48%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-24 07:40:08 | b80a3da8622d3a0f96fb7f945ab87450 | 21/66 (31.82%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-24 07:38:43 | 0d47c681a1881409b3db18917871dd5e | 33/66 (50.00%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-23 19:11:08 | 902467edb899dd39ee82bcdd7bef9f72 | 24/65 (36.92%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-23 18:16:32 | ef8a2636609f55a4c5ff35c62a240510 | 34/69 (49.28%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-23 16:24:22 | 786b6861b95a8cc47deaba2885b184ff | 19/66 (28.79%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-23 11:30:42 | 5e95a97347fcf1f25a3bfdd412f81b06 | 12/68 (17.65%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-22 21:50:35 | 9534ee331e9d61fb1021ee3f6fceaa5c | 35/69 (50.72%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 23:18:05 | 490a4ee8c64cc5d08279bc28cf80af30 | 19/67 (28.36%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 23:01:05 | c05481df07947c37cc9e60a469147bb8 | 22/67 (32.84%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 14:21:47 | e5ff4a1cba3d422b787a32d5e51c7697 | 19/69 (27.54%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 09:08:38 | 5b4b1426196564c617dd090926c4037c | 21/69 (30.43%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 06:59:59 | f6c0006b1c27d172f4ec073512a66c6a | 13/69 (18.84%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 06:41:02 | b999b3619c1c3dcf0023582e80a005ca | 18/68 (26.47%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-21 06:21:13 | fd4aefe1bf575c318337fca83af1dda6 | 13/69 (18.84%)
| 81.215.192.201 | 80 | Heodo |
| 2018-09-20 18:22:30 | ca7225a5ac7700ee93895e6edc592560 | 18/68 (26.47%)
| 81.215.192.201 | 80 | Heodo |
# of malware samples: 27