Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 91.231.166.124. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:91.231.166.124
Hostname:91-231-166-124.libradsl.it
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS198090
AS name:ASLIBRA
Country:- IT
First seen:2020-03-09 14:36:19 UTC
Last seen:2020-05-07 04:54:05 UTC
Last online:2020-04-10

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2020-05-07 05:35:543a4fd69c47e902ee8a8e052bc8ef586aVirustotal results 35 / 71 (49.30%) 91.231.166.1248080Heodo
2020-04-10 17:46:248070acedd3a623d0f31d90e7961b9d8aVirustotal results 51 / 72 (70.83%) 91.231.166.1248080Heodo
2020-04-10 08:12:043b217f5a81c635d33a30d194ce9a70dbVirustotal results 37 / 72 (51.39%) 91.231.166.1248080Heodo
2020-04-04 17:05:30b0b32618321f33f00f18b462b67e3a7cn/a91.231.166.1248080Heodo
2020-04-03 09:11:36dd726b2539276bf11a0e59d3b631304an/a91.231.166.1248080Heodo
2020-04-03 09:09:15dbbae51ad48eaf0e18a6e803eace7674n/a91.231.166.1248080Heodo
2020-04-03 09:08:327eb9aa2ff95b02599bcfaf74ca5aa61bn/a91.231.166.1248080Heodo
2020-04-03 09:07:31d98fc0e7388c9d0ccddd1917e7dc7654n/a91.231.166.1248080Heodo
2020-04-03 09:05:07ab343b7b2d1214d6e417befd811d15ddn/a91.231.166.1248080Heodo
2020-04-03 09:04:11da5d05b5f0ad86741bca4407cd560e21n/a91.231.166.1248080Heodo
2020-03-25 22:33:1736ed9437ae80079284518396ed377445n/a91.231.166.1248080Heodo
2020-03-25 11:37:27fdfe2467ceedbb43154a36cd965146fcn/a91.231.166.1248080Heodo
2020-03-22 00:44:40a4708e15384ef20b7f3ba8a3c892df1cVirustotal results 26 / 73 (35.62%) 91.231.166.1248080Heodo

# of malware samples: 13