Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 201.231.44.78. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:201.231.44.78
Hostname:78-44-231-201.fibertel.com.ar
Status:Offline
Spamhaus SBL:SBL447363
Malware:Heodo -
AS number:AS10318
AS name:CABLEVISION S.A.
Country:- AR
First seen:2019-05-03 20:24:37 UTC
Last seen:2019-05-10 01:48:25 UTC
Last online:2019-05-22

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-05-11 17:05:069f2abb8908a79f0b40483c69355b61f9Virustotal results 44/71 (61.97%) 201.231.44.7880Heodo
2019-05-10 05:36:05980f4868935345047b86d76bc48ba4b1Virustotal results 33/72 (45.83%) 201.231.44.7880Heodo
2019-05-10 03:30:1364d5422970a982a9c55d018fb3745892Virustotal results 28/72 (38.89%) 201.231.44.7880Heodo
2019-05-08 20:21:466717fd1656cea5fc984abc3053429d56Virustotal results 15/70 (21.43%) 201.231.44.7880Heodo

# of malware samples: 4