Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 190.106.97.230. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:190.106.97.230
Hostname:190-106-97-230.airsat.com.ar
Status:Offline
Spamhaus SBL:SBL427354
Malware:Heodo -
AS number:AS28026
AS name:Grape S.A.
Country:- AR
First seen:2018-12-19 17:47:34 UTC
Last seen:2018-12-20 23:22:24 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-12-21 10:08:508a4cd81a79780c45b172f084bb4fa80dVirustotal results 29/58 (50.00%) 190.106.97.2308080Heodo
2018-12-21 10:03:42fd7d5de9f83096a7eef95d5930ada7c7Virustotal results 13/59 (22.03%) 190.106.97.2308080Heodo
2018-12-21 09:36:001e13ca46ed9f5a4c91899f9129b05a68Virustotal results 28/60 (46.67%) 190.106.97.2308080Heodo
2018-12-21 09:29:5999aea89be11b3a7aad43f29fd70d484fVirustotal results 28/57 (49.12%) 190.106.97.2308080Heodo
2018-12-21 08:43:5415938f5f7477d2578bb0032c2e00ec4fVirustotal results 20/70 (28.57%) 190.106.97.2308080Heodo
2018-12-21 08:35:06454d5e8ebf8b2fb5b1cb107eb86adcd5Virustotal results 30/60 (50.00%) 190.106.97.2308080Heodo
2018-12-21 08:14:5851ff50f7b1e635fab91e09d423337b3fVirustotal results 28/60 (46.67%) 190.106.97.2308080Heodo
2018-12-21 08:01:360621e0c0d26621715eb1b3adc74f0f75Virustotal results 46/70 (65.71%) 190.106.97.2308080Heodo
2018-12-21 07:12:180c9fa01862946d1ac80a3e9cbb9dbe9cVirustotal results 27/60 (45.00%) 190.106.97.2308080Heodo
2018-12-21 07:08:49e8b0c7520dee7e827158354695e6f968Virustotal results 18/70 (25.71%) 190.106.97.2308080Heodo
2018-12-21 07:07:53f48f4bb19d4bcf8fca523dcf29913578n/a190.106.97.2308080Heodo
2018-12-21 06:50:42f910d40b57ff44384501fbb1407076f2Virustotal results 26/59 (44.07%) 190.106.97.2308080Heodo

# of malware samples: 12