Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 200.57.102.71. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:200.57.102.71
Hostname:aol-dial-200-57-102-71.zone-0.ip.static-ftth.axtel.net.mx
Status:Offline
Spamhaus SBL:SBL426695
Malware:Heodo -
AS number:AS6503
AS name:Axtel, S.A.B. de C.V.
Country:- MX
First seen:2018-10-03 15:21:12 UTC
Last seen:2018-10-05 08:28:19 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-10-05 08:21:34497720c9641e4dc7b78da99d103a74ddVirustotal results 23/68 (33.82%) 200.57.102.718443Heodo
2018-10-04 21:06:028a098b2fcfaf335d3902eff6b2ba67a6Virustotal results 16/67 (23.88%) 200.57.102.718443Heodo
2018-10-04 16:35:294c6f9d70eff3e14c58d8bbcac2c3f07aVirustotal results 16/69 (23.19%) 200.57.102.718443Heodo
2018-10-04 13:23:2160985097eabef1b073f9a6dd7d6b83a7Virustotal results 21/68 (30.88%) 200.57.102.718443Heodo
2018-10-04 11:53:04a45d0366f1379249c07f1bb4bca1db6bVirustotal results 18/68 (26.47%) 200.57.102.718443Heodo
2018-10-04 08:21:06d5959819df37d2c3781a426ab52cf417Virustotal results 15/68 (22.06%) 200.57.102.718443Heodo
2018-10-04 07:23:06cabcd39d75d3c224ea50ae32d0b7124fVirustotal results 16/69 (23.19%) 200.57.102.718443Heodo
2018-10-03 20:16:177fa867ca59e9e192dc3b49463ff18a06Virustotal results 16/66 (24.24%) 200.57.102.718443Heodo
2018-10-03 19:41:32fa402d962601499d5c1736f57ec34387Virustotal results 18/68 (26.47%) 200.57.102.718443Heodo
2018-10-03 19:18:4428e9ca10bdc955701667b67afde4c655Virustotal results 21/69 (30.43%) 200.57.102.718443Heodo
2018-10-03 15:41:188d7e4de8be6c5262656cb1b76486a179Virustotal results 17/69 (24.64%) 200.57.102.718443Heodo
2018-10-03 15:13:52c290fd866a030fd92e3a7ce5dc1f95aaVirustotal results 17/69 (24.64%) 200.57.102.718443Heodo

# of malware samples: 12