Browse Botnet C&Cs

You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 85.99.226.42. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry


Host:85.99.226.42
Hostname:n/a
Status:Offline
Spamhaus SBL:Not listed
Malware:Heodo -
AS number:AS9121
AS name:TTNET
Country:- TR
First seen:2018-09-12 07:40:52 UTC
Last seen:2018-09-16 19:52:10 UTC

Malware Samples


The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).

Timestamp (UTC)Malware Sample (MD5 hash)VTHostPortSignature
2018-09-16 19:48:026c750fecd0437b408925683e7f2636c0Virustotal results 37/67 (55.22%) 85.99.226.4280Heodo
2018-09-14 07:10:48d6d63172575cdb30380d743a985f0691Virustotal results 22/67 (32.84%) 85.99.226.4280Heodo
2018-09-13 07:10:38bf9ae286bf268befd9c77de03f1d6bd3Virustotal results 25/68 (36.76%) 85.99.226.4280Heodo
2018-09-13 00:07:56985109668caa07571b1b0487099a3143Virustotal results 24/68 (35.29%) 85.99.226.4280Heodo
2018-09-12 12:31:2071be0cfca61d4fcd2e7a102a508ea3c1Virustotal results 25/68 (36.76%) 85.99.226.4280Heodo
2018-09-12 08:27:078f3a44acfb4d558016906049fafe6eb1Virustotal results 21/68 (30.88%) 85.99.226.4280Heodo
2018-09-12 08:17:03d2029aff1ff2a64cc299d112dfeff781Virustotal results 22/67 (32.84%) 85.99.226.4280Heodo
2018-09-12 07:32:576a64063038d167bffc78fff15c65cd41Virustotal results 19/67 (28.36%) 85.99.226.4280Heodo

# of malware samples: 8