Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 91.117.147.2. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:91.117.147.2
Hostname:2.147.117.91.dynamic.reverse-mundo-r.com
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS12334
AS name:Galicia - Spain
Country:- ES
First seen:2018-11-20 19:06:00 UTC
Last seen:2019-01-08 07:25:52 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-01-08 08:09:580d826235fc7a56464b9e9e1e6abb9735Virustotal results 50/69 (72.46%) 91.117.147.27080Heodo
2018-11-22 23:12:48427a5f7fcf0a8c01587320a02262fafdVirustotal results 43/69 (62.32%) 91.117.147.27080Heodo
2018-11-22 21:01:05888abc66da2b4d21399bb30a6d3f0996Virustotal results 36/67 (53.73%) 91.117.147.27080Heodo
2018-11-21 10:29:45b733f627f5eda11396392534303ca980Virustotal results 14/59 (23.73%) 91.117.147.27080Heodo
2018-11-21 06:55:445868ccdf0b7ac5ee64dcc8477b916fc3Virustotal results 34/57 (59.65%) 91.117.147.27080Heodo
2018-11-21 01:02:20a37b2233aab704e32828d9d7554a2130Virustotal results 16/66 (24.24%) 91.117.147.27080Heodo
2018-11-20 22:04:32f30a10c1e60c146b17b9134667a9a54aVirustotal results 13/57 (22.81%) 91.117.147.27080Heodo
2018-11-20 21:55:08db954ce3eb698e6f32847d5886b87053Virustotal results 37/67 (55.22%) 91.117.147.27080Heodo
2018-11-20 21:53:072b50095e8427f283a88598d2f3230948Virustotal results 13/56 (23.21%) 91.117.147.27080Heodo
2018-11-20 20:41:152130ca052d17963d03e2d20c59552a21Virustotal results 12/56 (21.43%) 91.117.147.27080Heodo
2018-11-20 20:07:56ca5b4c8842e7b40923bfcfb3343542daVirustotal results 12/56 (21.43%) 91.117.147.27080Heodo
2018-11-20 19:57:21212db254cf12dbf2d4e24f20bfa0f5f6Virustotal results 31/57 (54.39%) 91.117.147.27080Heodo
2018-11-20 19:29:406b86ad97714abdadd4548784a526e2a0Virustotal results 12/57 (21.05%) 91.117.147.27080Heodo
2018-11-20 19:20:193129b5dd0ea4eb70ad37b7ea4cb983c2Virustotal results 16/66 (24.24%) 91.117.147.27080Heodo
2018-11-20 19:06:00b33f4d65af237a481688a071ec56f957Virustotal results 27/57 (47.37%) 91.117.147.27080Heodo

# of malware samples: 15