Browse Botnet C&Cs
You are currently viewing the database entry for the Heodo botnet command&control server (C&C) 198.24.120.198. You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.
Database Entry
| Host: | 198.24.120.198 |
|---|---|
| Hostname: | mail.doppstadtus.com |
| Status: | Offline |
| Spamhaus SBL: | Not listed |
| Malware: | Heodo  |
| AS number: | AS10796 |
| AS name: | SCRR-10796 - Time Warner Cable Internet LLC, US |
| Country: |  US |
| First seen: | 2018-08-03 07:54:31 UTC |
| Last seen: | 2018-08-12 01:06:52 UTC |
Malware Samples
The table below documents all malware samples associated with this Heodo botnet command&control server (C&C).
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Host | Port | Signature |
|---|---|---|---|---|---|
| 2019-01-09 15:12:02 | 6184abfbd6db40c9c7eeb4e80eb5e852 |  49/68 (72.06%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-09 09:13:36 | 97fb91467964105697fd47ec7ac266ea | 50/68 (73.53%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 22:58:27 | 217e1e8e9ec5e43b3875b66dac2e82d9 | 49/68 (72.06%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 18:57:15 | 80d8e04dce81d6091ef007573aa279f0 | 48/68 (70.59%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 16:25:11 | 2b431a277f85310b1c8b3b042ba67bb3 | 48/68 (70.59%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 15:09:01 | 71868b474ea69b9f9bc5f295c88611ad | 51/67 (76.12%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 14:59:26 | b1831f2069b2228f71c2759792bb4a18 | 47/68 (69.12%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 14:12:38 | ea296f60a73e9f176a5483d1e615c544 | 46/68 (67.65%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 13:55:31 | df3ca7449e24a0e0d45e24b84ff42951 | 48/68 (70.59%)
| 198.24.120.198 | 80 | Heodo |
| 2019-01-08 07:57:29 | 4470daf3dff01a95a716e599ecda5414 | 48/67 (71.64%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-12 01:06:52 | 12dbb3dcf7c935c7659e6e13ce750129 | 45/67 (67.16%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-09 02:22:52 | bacfc8d27d124493de842772bd2b9e02 | 42/68 (61.76%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-07 07:27:23 | e6eb0cd035082a28ec1c8e1b7e880167 | 35/67 (52.24%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 19:24:55 | 7e92aae3bdfc96f47c67c94b8341b9c9 | 46/68 (67.65%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 16:02:23 | f250d5f179722bf763537e05dc2ad8ac | 16/67 (23.88%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 14:13:15 | a4adb9a51078ff276183d744a26bdb47 | 13/68 (19.12%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 14:12:34 | 36e00e02014e3e81694fc9d2d5d28c69 | 15/68 (22.06%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 12:41:58 | fa1046536b7904ac1328ecf60b3d3fd7 | 14/68 (20.59%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-05 08:08:20 | d20445f233b1528542f558521fd48bc8 | 13/68 (19.12%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 14:46:32 | b4a034ac76299e374941cb5ce53811b8 | 14/68 (20.59%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 10:56:30 | 534a0810fde1af10a1c26c6e153989b2 | 11/67 (16.42%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 07:25:17 | 3b67fad170f033422ca52f7a8b121816 | 33/67 (49.25%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 07:23:21 | 0cb6aa123c1958d72fc2c015c632417b | 35/68 (51.47%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 07:20:06 | 4ae58102d7740b40ae2ff1f6291cc911 | 11/68 (16.18%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 07:09:51 | bad8cae641467f7bd16baf303b28775a | 19/68 (27.94%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-04 07:07:38 | ac3858ff440c4869878dfb4a05c5a9d3 | 32/68 (47.06%)
| 198.24.120.198 | 80 | Heodo |
| 2018-08-03 12:28:24 | 9e6c5997b7d2966898997f60c0400246 | 20/66 (30.30%)
| 198.24.120.198 | 80 | Heodo |
# of malware samples: 27