Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 201.231.44.78. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:201.231.44.78
Hostname:78-44-231-201.fibertel.com.ar
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS10318
AS name:CABLEVISION S.A.
Country:- AR
First seen:2019-05-03 20:24:37 UTC
Last seen:2019-06-13 07:01:49 UTC
Last online:2019-06-07

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-06-13 07:26:38ae902ba21d4bd763ba54c3043cc0806fVirustotal results 54/71 (76.06%) 201.231.44.7880Heodo
2019-06-13 07:17:46d9f5cc7285e8ecc8710aa8ca6aeb09c1Virustotal results 56/71 (78.87%) 201.231.44.7880Heodo
2019-05-11 17:05:069f2abb8908a79f0b40483c69355b61f9Virustotal results 44/71 (61.97%) 201.231.44.7880Heodo
2019-05-10 05:36:05980f4868935345047b86d76bc48ba4b1Virustotal results 33/72 (45.83%) 201.231.44.7880Heodo
2019-05-10 03:30:1364d5422970a982a9c55d018fb3745892Virustotal results 28/72 (38.89%) 201.231.44.7880Heodo
2019-05-08 20:21:466717fd1656cea5fc984abc3053429d56Virustotal results 15/70 (21.43%) 201.231.44.7880Heodo

# of malware samples: 6