Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 105.247.109.117. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:105.247.109.117
Hostname:n/a
Status:Offline
Spamhaus SBL:SBL447286
Malware:Heodo -
AS number:AS36994
AS name:Vodacom-VB
Country:- ZA
First seen:2019-05-14 15:10:46 UTC
Last seen:2019-05-21 13:12:28 UTC
Last online:2019-05-17

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-05-21 13:07:2785c46e05297f7fda5e26f1e59ef4cec6Virustotal results 25/72 (34.72%) 105.247.109.117993Heodo
2019-05-20 19:30:479725d9368e642e74586456bbad9f37b5Virustotal results 17/71 (23.94%) 105.247.109.117993Heodo
2019-05-20 15:12:52b1994f37b1ca47638931dd05d2a92727Virustotal results 17/72 (23.61%) 105.247.109.117993Heodo
2019-05-15 19:08:13e3c5814daf7a39bcc5f56b1ba62147edVirustotal results 25/72 (34.72%) 105.247.109.117993Heodo
2019-05-15 09:54:0282bf7938b24c2c1476ed1ae0bf6e583cVirustotal results 19/72 (26.39%) 105.247.109.117993Heodo
2019-05-15 01:37:03cb9026e269f6a2bf6db1c923a3451a16Virustotal results 17/72 (23.61%) 105.247.109.117993Heodo
2019-05-15 01:14:1355316f1d752387fd46d5e8b122c87e78Virustotal results 48/69 (69.57%) 105.247.109.117993Heodo
2019-05-14 15:03:434f755fef4a94eecbfce7ab4fc5d70391Virustotal results 21/71 (29.58%) 105.247.109.117993Heodo

# of malware samples: 8