Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 63.230.124.249. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:63.230.124.249
Hostname:mail.ccboise.org
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS209
AS name:CENTURYLINK-US-LEGACY-QWEST - CenturyLink Communications, LLC
Country:- US
First seen:2018-08-02 02:00:39 UTC
Last seen:2018-08-23 17:36:05 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-08-23 17:34:160dfbd319b3cb1ba865cf7978f5c8bc93Virustotal results 29/68 (42.65%) 63.230.124.249443Heodo
2018-08-20 17:13:0807a424a7a0c481b13168236fa0eaadcbVirustotal results 29/68 (42.65%) 63.230.124.249443Heodo
2018-08-07 09:57:459e7023bc383be8b3458e99125acaf7abVirustotal results 37/68 (54.41%) 63.230.124.249443Heodo
2018-08-04 21:19:53e81bb036a5f6453a45f983b90e162096Virustotal results 19/68 (27.94%) 63.230.124.249443Heodo
2018-08-04 00:39:3402f85d2a4e29285d1b26edcc86829c89Virustotal results 44/68 (64.71%) 63.230.124.249443Heodo
2018-08-03 05:08:4756dc56120820a3ac851cd3372e43bb9fVirustotal results 19/68 (27.94%) 63.230.124.249443Heodo
2018-08-03 05:07:064ccece115ce1ce38d64087913f2c43caVirustotal results 24/63 (38.10%) 63.230.124.249443Heodo
2018-08-03 05:05:495898cf94c7b371149bed8de89f05d30cVirustotal results 19/67 (28.36%) 63.230.124.249443Heodo
2018-08-03 05:03:56f35c5b1fd1fc0e93810a47dc49cdc49dVirustotal results 18/68 (26.47%) 63.230.124.249443Heodo
2018-08-02 13:30:5826f30f7a2c13f06f6e791ce4768e80dfVirustotal results 12/65 (18.46%) 63.230.124.249443Heodo
2018-08-02 12:44:009843b5e48ecb45f176a19b840da2fd3eVirustotal results 32/68 (47.06%) 63.230.124.249443Heodo
2018-08-02 12:24:57ddc8bd040f0e83d0917442c88405f086Virustotal results 13/68 (19.12%) 63.230.124.249443Heodo

# of malware samples: 12