Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 50.31.146.101. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:50.31.146.101
Hostname:vps.w21099.com
Status:Offline
Spamhaus SBL:SBL409242
Malware:Heodo -
AS number:AS23352
AS name:SERVERCENTRAL - Server Central Network
Country:- US
First seen:2018-05-13 19:11:58 UTC
Last seen:2019-02-01 06:49:33 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-02-02 12:23:54a42399c1bca228a7e9b829a67d2daae2Virustotal results 55/71 (77.46%) 50.31.146.1018080Heodo
2019-02-02 06:13:02a2e82ccce86af4cdde6845a96bd08fdaVirustotal results 51/69 (73.91%) 50.31.146.1018080Heodo
2019-01-08 21:01:35ce9d928c96b106a7ad44c9e579d3f443Virustotal results 56/68 (82.35%) 50.31.146.1018080Heodo
2019-01-08 19:50:1562e8dbd56c687be4e960a2f4b019cdabVirustotal results 54/68 (79.41%) 50.31.146.1018080Heodo
2019-01-08 14:58:419c8251cce6bf2d39dfdb123da0849e8aVirustotal results 56/67 (83.58%) 50.31.146.1018080Heodo
2019-01-08 14:43:1432dd6ca1cb3c3d363932bac8fd0e447bVirustotal results 51/69 (73.91%) 50.31.146.1018080
2019-01-08 14:40:39210acd00ee7dbd9892e5ca3c6a630334Virustotal results 47/68 (69.12%) 50.31.146.1018080Heodo
2019-01-08 09:23:59db0a60f9ea1999c59aa2dcd2ac49e38eVirustotal results 46/62 (74.19%) 50.31.146.1018080
2019-01-08 08:05:116603a61200564f7f1b7f39376927ac12Virustotal results 56/68 (82.35%) 50.31.146.1018080Heodo
2018-12-24 07:49:51024516b7611909efbcc588bf5066b295Virustotal results 48/67 (71.64%) 50.31.146.1018080Heodo
2018-12-23 18:45:325da7bf5df7df29f85d3169930a6b2ae4Virustotal results 55/67 (82.09%) 50.31.146.1018080Heodo
2018-12-23 09:14:3545cde5c06adcc8e047a0dd4c2eabcebbVirustotal results 52/67 (77.61%) 50.31.146.1018080Heodo
2018-11-24 16:31:33a2b20d0c0f534966518a453a63568c0aVirustotal results 45/69 (65.22%) 50.31.146.1018080Heodo
2018-11-19 16:46:36a276bb71882899af4b81700e1e70f5fcVirustotal results 48/67 (71.64%) 50.31.146.1018080Heodo

# of malware samples: 14