Browse Botnet C&Cs
You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 201.127.11.90. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.
Database Entry
| Host: | 201.127.11.90 |
|---|---|
| Hostname: | dsl-201-127-11-90-dyn.prod-infinitum.com.mx |
| Status: | Offline |
| Spamhaus SBL: | Not listed |
| Malware: | Heodo  |
| AS number: | AS8151 |
| AS name: | Uninet S.A. de C.V. |
| Country: |  MX |
| First seen: | 2020-12-15 19:08:13 UTC |
| Last seen: | 2021-01-19 19:40:37 UTC |
| Last online: | 2020-12-20 |
Malware Samples
The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Host | Port | Signature |
|---|---|---|---|---|---|
| 2021-01-20 14:42:42 | 6e41e828f5ae2602e05c9aa87619f975 | n/a | 201.127.11.90 | 8080 | Heodo |
| 2021-01-20 11:46:41 | 1b4e16071289dc289afff7e3a3ed72b5 | n/a | 201.127.11.90 | 8080 | Heodo |
| 2021-01-18 21:20:26 | 03b135d081377af120b16b955c4618fe |  42 / 69 (60.87%)
| 201.127.11.90 | 8080 | Heodo |
| 2021-01-01 14:54:06 | ea77ab298fabe5e73d4aefeb57ef48cb | 37 / 69 (53.62%)
| 201.127.11.90 | 8080 | Heodo |
| 2020-12-17 17:34:04 | b906629983de7de4db9064d578116915 | 30 / 71 (42.25%)
| 201.127.11.90 | 8080 | Heodo |
# of malware samples: 5