Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 128.2.98.139. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:128.2.98.139
Hostname:PO-SABROWN-D.PC.CC.CMU.EDU
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS9
AS name:CMU-ROUTER - Carnegie Mellon University, US
Country:- US
First seen:2018-09-11 08:59:59 UTC
Last seen:2018-09-11 10:48:47 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-01-08 21:21:37cfef30c5c3ac4c16408f8f2ec0dc8daeVirustotal results 12/68 (17.65%) 128.2.98.139443Heodo
2019-01-08 21:01:535663f685d693273678c20095a58e6a9fVirustotal results 40/68 (58.82%) 128.2.98.139443Heodo
2019-01-08 14:59:00974922c6081c99bab6f615985295722dVirustotal results 34/68 (50.00%) 128.2.98.139443Heodo
2019-01-08 12:25:39fc819f0f28559a35541eb5bfacfeaa46Virustotal results 35/69 (50.72%) 128.2.98.139443Heodo
2019-01-08 10:38:27c9c54ca706f013abb3472a6ba84b8cb3Virustotal results 45/69 (65.22%) 128.2.98.139443Heodo
2018-09-11 11:47:366ee81f19c0b8da85487a32edf30f5bb8Virustotal results 9/67 (13.43%) 128.2.98.139443Heodo
2018-09-11 11:45:020451bd23eaea7afb0457a4e70eb033d3Virustotal results 13/68 (19.12%) 128.2.98.139443Heodo
2018-09-11 11:27:56e2f418e8453f5e0bc00c92bf9514ffafVirustotal results 12/65 (18.46%) 128.2.98.139443Heodo
2018-09-11 08:59:59d7998de933db14bf9cb1625b5dd3964bVirustotal results 14/68 (20.59%) 128.2.98.139443Heodo
2018-09-11 08:57:57e7fdafac3043c25da9802844cd82815bVirustotal results 16/67 (23.88%) 128.2.98.139443Heodo
2018-09-11 08:13:18087e43e9c683984c797dc6f59bda6564Virustotal results 14/68 (20.59%) 128.2.98.139443Heodo
2018-09-11 07:58:251455f94e41051dec0fb8709c7218063cVirustotal results 16/68 (23.53%) 128.2.98.139443Heodo
2018-09-11 07:37:52a17d2f7b275fcf9c41f341f8315e0460Virustotal results 24/68 (35.29%) 128.2.98.139443Heodo
2018-09-11 07:20:21d09fd23511936f960c660bcfa1b3eb29Virustotal results 13/68 (19.12%) 128.2.98.139443Heodo
2018-09-11 06:43:4911d9b733f7db19f2ab15ee11147ecd67Virustotal results 28/67 (41.79%) 128.2.98.139443Heodo

# of malware samples: 15