Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 105.224.171.102. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:105.224.171.102
Hostname:105-224-171-102.south.dsl.telkomsa.net
Status:Offline
Spamhaus SBL:SBL446136
Malware:Heodo -
AS number:AS37457
AS name:Telkom-Internet
Country:- ZA
First seen:2019-05-07 20:32:40 UTC
Last seen:2019-06-06 20:59:26 UTC
Last online:2019-06-07

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-06-20 21:36:2400242ade1ef8856803b80e7494fa36bcVirustotal results 50/73 (68.49%) 105.224.171.10280Heodo
2019-06-06 11:31:44bd25e6c2c42d2f730c7caf167d420c66Virustotal results 42/71 (59.15%) 105.224.171.10280Heodo
2019-06-06 08:20:4273b2c2c311ec3c2ca73b314aa06ca2f0Virustotal results 47/65 (72.31%) 105.224.171.10280Heodo
2019-06-05 23:43:521980342ce32af3f24c0bc3aee5f550ecVirustotal results 52/74 (70.27%) 105.224.171.10280Heodo
2019-06-05 23:19:17441b39e6d26c3dfe179b648afc4a9708Virustotal results 49/73 (67.12%) 105.224.171.10280Heodo
2019-06-05 21:34:55f47a98dafebbc1bfe70e9c93ac4a22ebVirustotal results 53/72 (73.61%) 105.224.171.10280Heodo
2019-06-05 20:52:58480e14e15e6fd2fbca89c6ea5870a42eVirustotal results 52/72 (72.22%) 105.224.171.10280Heodo
2019-05-30 15:29:184100766bce785f61f8e37c05f061e3c4Virustotal results 53/72 (73.61%) 105.224.171.10280Heodo
2019-05-30 08:26:097b1901b12ea955cf86460624e4d2c1d1Virustotal results 48/71 (67.61%) 105.224.171.10280Heodo
2019-05-29 09:45:29d892a8530681250d657f3fe6302e02aeVirustotal results 37/71 (52.11%) 105.224.171.10280Heodo
2019-05-29 08:13:4148970a865a8f686090177db61812ed00Virustotal results 25/69 (36.23%) 105.224.171.10280Heodo
2019-05-29 06:40:12dbda01dc388c37b1e6ed05243aec1d43Virustotal results 17/70 (24.29%) 105.224.171.10280Heodo
2019-05-29 01:10:27b54883351421ed20db70a89a655d75efVirustotal results 47/69 (68.12%) 105.224.171.10280Heodo
2019-05-28 22:47:143582cec978385546d4e07922b3883cc1Virustotal results 24/72 (33.33%) 105.224.171.10280Heodo
2019-05-27 12:12:34216742d5d9b0d97b3694cd9c1db36436Virustotal results 50/73 (68.49%) 105.224.171.10280Heodo
2019-05-24 13:42:47a25e09ecc69254628b48a69e6a4b6073Virustotal results 27/73 (36.99%) 105.224.171.10280Heodo
2019-05-17 12:17:060f44f2bb79b68b8abb1bba82491a4efeVirustotal results 16/71 (22.54%) 105.224.171.10280Heodo
2019-05-17 10:04:570eeca9253d7458e6ddb4e131f39b63f7Virustotal results 54/70 (77.14%) 105.224.171.10280Heodo
2019-05-17 10:04:1556aba48088c683965401f48e5cc5c27bVirustotal results 25/70 (35.71%) 105.224.171.10280Heodo
2019-05-17 06:00:02e27208ada49bba76f7d17ec806e8fa77Virustotal results 18/71 (25.35%) 105.224.171.10280Heodo
2019-05-09 22:47:04b9a10fef9cc3ece00229b362c92ea026Virustotal results 15/72 (20.83%) 105.224.171.10280Heodo
2019-05-08 17:41:46b2cbc69e4ecf4d0f2c305ae6db6b840fVirustotal results 14/73 (19.18%) 105.224.171.10280Heodo

# of malware samples: 22