Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 192.99.38.200. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:192.99.38.200
Hostname:ns502329.ip-192-99-38.net
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS16276
AS name:OVH
Country:- CA
First seen:2017-05-23 08:14:24 UTC
Last seen:2019-02-20 08:51:45 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2019-02-20 11:48:06392992f2b0b76ed6271e8ee81c660a59Virustotal results 31/69 (44.93%) 192.99.38.200443Heodo
2019-02-20 11:42:421cc6b5a1643320229495046851350773Virustotal results 45/70 (64.29%) 192.99.38.200443Heodo

# of malware samples: 2