############################################################################## # URLhaus ASN CSV Feed # # Generated on 2025-11-19 08:21:50 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS17054 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2025-08-01 12:06:35","https://www.in.gov/iot/nts/Shared%20Documents/VPN/secureclient51474/cisco-secure-client-win-5.1.4.74-core-vpn-predeploy-k9.msi","offline","malware_download","","www.in.gov","208.40.244.65","17054","US" "2025-08-01 12:06:35","https://www.in.gov/iot/nts/Shared%20Documents/VPN/secureclient51474/cisco-secure-client-win-5.1.4.74-predeploy-k9/cisco-secure-client-win-5.1.4.74-core-vpn-predeploy-k9.msi","offline","malware_download","","www.in.gov","208.40.244.65","17054","US" "2023-05-05 23:52:10","https://forsalenear.me/kbase/rentfree.zip","offline","malware_download","geofenced|obama261|Qakbot|Qbot|Quakbot|USA|wsf|zip","forsalenear.me","216.37.42.46","17054","US" "2023-05-05 14:22:11","http://forsalenear.me/kbase/rentfree.zip","offline","malware_download","geofenced|obama261|Qakbot|Quakbot|USA|wsf|zip","forsalenear.me","216.37.42.46","17054","US" "2023-04-24 13:10:44","http://gecopakistan.com/pEp/per.zip","offline","malware_download","geofenced|obama255|Qakbot|Qbot|Quakbot|USA|wsf|zip","gecopakistan.com","216.37.42.224","17054","US" "2023-04-20 18:30:18","https://gecopakistan.com/miie/autpossimus.php","offline","malware_download","671|BB24|geofenced|hta|Qakbot|Qbot|Quakbot|tr|USA|zip","gecopakistan.com","216.37.42.224","17054","US" "2023-03-22 15:43:17","https://bluejaytraders.com/OpuZy1q/FnpPh5fty","offline","malware_download","BB20|dll|geofenced|Qakbot|Quakbot|ua-ps|USA","bluejaytraders.com","104.238.236.80","17054","US" "2022-12-23 20:50:23","http://centralnineadulted.org/blog/Cancellation_470799_Dec23.zip","offline","malware_download","10900|geofenced|ISO|obama233|Qakbot|Qbot|Quakbot|USA|zip","centralnineadulted.org","216.37.42.147","17054","US" "2022-05-21 21:17:04","http://keltonconstruction.com/_vti_bin/H6Qm88nzyQe/","offline","malware_download","emotet|epoch5|exe|Heodo","keltonconstruction.com","216.37.42.244","17054","US" "2022-05-17 18:52:06","http://keltonconstruction.com/_vti_bin/DFNorq/","offline","malware_download","dll|emotet|epoch5|heodo","keltonconstruction.com","216.37.42.244","17054","US" "2022-03-30 07:12:08","http://cobbwebllc.com/momlandscaping/Eq9VyXB1/","offline","malware_download","dll|emotet|epoch5|heodo","cobbwebllc.com","216.37.42.226","17054","US" "2021-06-22 14:39:04","https://fam144.com/granville-bogisich/Ava.Garcia-44.zip","offline","malware_download","html|Qakbot|Qbot|SilentBuilder|TR|zip","fam144.com","216.37.42.12","17054","US" "2021-06-22 11:29:07","https://fam144.com/granville-bogisich/Sophia.Garcia-43.zip","offline","malware_download","html|Qakbot|Qbot|SilentBuilder|TR|zip","fam144.com","216.37.42.12","17054","US" "2020-08-03 03:59:16","http://exeo.com/wine/g0t-nf3j-2344/","offline","malware_download","doc|emotet|epoch3|Heodo","exeo.com","216.37.42.192","17054","US" "2020-07-31 22:02:14","http://ltrybus.com/cgi-bin/mff_xao9d_5ld5qajfmx/","offline","malware_download","emotet|epoch2|exe|heodo","ltrybus.com","216.37.42.192","17054","US" "2020-07-30 18:47:08","http://joeljustice.com/images/OM4AD/","offline","malware_download","emotet|epoch1|exe|heodo","joeljustice.com","216.37.42.244","17054","US" "2020-07-29 14:59:10","http://gregladen.com/blog/knEIK06090/","offline","malware_download","emotet|epoch1|exe|Heodo","gregladen.com","216.37.42.10","17054","US" "2020-07-27 21:12:17","http://cfostudio.com/cfo1/Cnn491117/","offline","malware_download","emotet|epoch1|exe|Heodo","cfostudio.com","216.37.42.254","17054","US" "2020-07-27 17:17:47","http://robertsinclair.net/videos/5789/","offline","malware_download","emotet|epoch1|exe|Heodo","robertsinclair.net","216.37.42.192","17054","US" "2020-07-27 12:42:04","http://exeo.com/birthday/report/36h53jcnms3f/b764495492407405rpwzw90ybukghmfb/","offline","malware_download","doc|emotet|epoch2|heodo","exeo.com","216.37.42.192","17054","US" "2020-07-27 11:37:07","http://ltrybus.com/cgi-bin/disponible/o0cx0qHa-X8eW60P9pgbiJ2-zona/7712190933-sCVN2jjoK/12264-iU2Xl/","offline","malware_download","doc|emotet|epoch1|Heodo","ltrybus.com","216.37.42.192","17054","US" "2019-05-10 17:52:09","http://operationfriendtofriend.com/wp-admin/DOC/ONlVlDaQNNzFYjqjt/","offline","malware_download","doc|emotet|epoch2","operationfriendtofriend.com","209.166.164.71","17054","US" "2019-02-22 15:11:03","http://weresolve.ca/EN_en/llc/Inv/ZeiYy-WY_Ko-GyU/","offline","malware_download","Emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-20 14:52:03","http://weresolve.ca/file/Invoice/vKVR-lro_frym-X62/","offline","malware_download","Emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-18 14:30:08","http://weresolve.ca/de_DE/QPTCOWC0822892/Rechnung/RECH/","offline","malware_download","Emotet|Heodo|Tinba","weresolve.ca","66.11.12.18","17054","US" "2019-02-15 23:36:07","http://weresolve.ca/AWlN-dO_LPWjbADqQ-hjt/","offline","malware_download","Emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-13 23:45:43","http://weresolve.ca/doc/Invoice/KmtQq-Vs8yN_VmpHLQ-KJP/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-11 21:54:03","http://weresolve.ca/En_us/company/New_invoice/CbbT-bb9Ql_urEa-Ahe/","offline","malware_download","Emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-07 23:56:12","http://weresolve.ca/En_us/info/Inv/0333180560/tRVYD-K7K6L_KMgAeItKH-PSo/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-06 01:17:48","http://weresolve.ca/scan/New_invoice/mFZfS-B5RRY_hGc-qj/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-02-01 16:59:49","http://weresolve.ca/US_us/xerox/LEVa-nxXM_KN-gCE/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-28 14:31:14","http://weresolve.ca/fpPb-BdXn_iUXzU-QI/invoices/19509/1739/EN_en/New-order/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-23 11:31:13","http://weresolve.ca/Amazon/Kunden/012019/","offline","malware_download","emotet|epoch1|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-21 10:51:05","http://weresolve.ca/ZLqX781311yxXcTFO/","offline","malware_download","exe|Heodo|Tinba","weresolve.ca","66.11.12.18","17054","US" "2019-01-18 03:52:50","http://weresolve.ca/EUmkd-4tom_tGUu-r0q/invoices/9777/44617/EN_en/Document-needed/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-16 05:14:40","http://weresolve.ca/gQce-5d_fcmkOlhM-IJw/U970/invoicing/US/Need-to-send-the-attachment/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-14 07:51:39","http://weresolve.ca/cgDRAqE_hx1NeK/","offline","malware_download","Emotet|exe|Heodo","weresolve.ca","66.11.12.18","17054","US" "2019-01-14 05:51:01","http://weresolve.ca/qwQUU-tx_SKVCAopz-wy/InvoiceCodeChanges/En_us/Invoices-attached","offline","malware_download","doc","weresolve.ca","66.11.12.18","17054","US" "2018-12-20 07:23:07","http://peconashville.com/hvCzMhDOpe/","offline","malware_download","emotet|exe|heodo","peconashville.com","216.37.42.18","17054","US" "2018-12-19 16:37:23","http://weresolve.ca/cAGWGR8_z6m2_ZLZ/","offline","malware_download","emotet|epoch2|exe|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-18 05:52:32","http://weresolve.ca/sLyI-BpEuAKdH0tMpNJQ_vVZzJGHW-zti/","offline","malware_download","emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-14 16:23:48","http://weresolve.ca/Dec2018/US/Overdue-payment/","offline","malware_download","emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-12 16:43:13","http://weresolve.ca/ACH/PaymentAdvice/files/En/Scan/","offline","malware_download","emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-10 08:15:03","http://weresolve.ca/kLK","offline","malware_download","exe","weresolve.ca","66.11.12.18","17054","US" "2018-12-07 23:10:20","http://weresolve.ca/Download/En_us/Invoice-8930292","offline","malware_download","doc|emotet|epoch2","weresolve.ca","66.11.12.18","17054","US" "2018-12-07 19:44:09","http://weresolve.ca/US/Transactions-details/122018","offline","malware_download","emotet|epoch1","weresolve.ca","66.11.12.18","17054","US" "2018-12-07 16:23:18","http://weresolve.ca/US/Transactions-details/122018/","offline","malware_download","doc|emotet|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-07 00:53:23","http://weresolve.ca/Download/En_us/Invoice-8930292/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-04 07:39:24","http://weresolve.ca/xerox/En/Open-invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-12-03 15:15:26","http://weresolve.ca/xerox/En/Open-invoices","offline","malware_download","emotet|epoch2|Heodo","weresolve.ca","66.11.12.18","17054","US" "2018-11-17 00:53:05","http://peconashville.com/US/Documents/112018/","offline","malware_download","doc|emotet|epoch1","peconashville.com","216.37.42.18","17054","US" "2018-11-16 05:39:05","http://peconashville.com/US/Documents/112018","offline","malware_download","emotet|epoch1|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-12 23:08:32","http://peconashville.com/Jng07/","offline","malware_download","doc|emotet|epoch2|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-12 14:44:15","http://timlinger.com/nmw/","offline","malware_download","AgentTesla|emotet|exe|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-12 14:44:05","http://timlinger.com/nmw","offline","malware_download","AgentTesla|emotet|exe|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-12 12:18:41","http://peconashville.com/Jng07","offline","malware_download","doc|emotet|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-09 23:01:17","http://peconashville.com/En_us/Documents/11_18/","offline","malware_download","doc|emotet|epoch1|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-09 21:19:07","http://peconashville.com/En_us/Documents/11_18","offline","malware_download","doc|emotet|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-09 20:50:49","http://timlinger.com/4095658F/biz/Personal/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-08 14:38:06","http://timlinger.com/4095658F/biz/Personal","offline","malware_download","doc|emotet|heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-08 00:55:08","http://timlinger.com/DOC/EN_en/ACH-form/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-07 07:52:38","http://timlinger.com/DOC/EN_en/ACH-form","offline","malware_download","doc|emotet|heodo","timlinger.com","216.37.42.32","17054","US" "2018-11-06 07:36:55","http://peconashville.com/INFO/En_us/Service-Report-20333)","offline","malware_download","doc|emotet|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-05 21:18:17","http://peconashville.com/INFO/En_us/Service-Report-20333/","offline","malware_download","doc|emotet|epoch2|Heodo","peconashville.com","216.37.42.18","17054","US" "2018-11-05 19:38:00","http://peconashville.com/INFO/En_us/Service-Report-20333","offline","malware_download","doc|emotet|heodo","peconashville.com","216.37.42.18","17054","US" "2018-10-03 04:54:44","http://peconashville.com/FILE/EN_en/Invoice-78704770","offline","malware_download","doc|emotet|heodo","peconashville.com","216.37.42.18","17054","US" "2018-10-02 19:02:04","http://timlinger.com/EN_US/ACH/102018","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-27 23:03:51","http://timlinger.com/EN_US/Transaction_details/09_18","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-19 04:29:51","http://timlinger.com/Download/EN_en/Important-Please-Read/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-17 13:31:09","https://timlinger.com/Download/EN_en/Important-Please-Read","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-15 13:15:24","http://timlinger.com/Download/EN_en/Important-Please-Read","offline","malware_download","doc|emotet|heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-11 14:10:54","http://timlinger.com/MfWF8tC6","offline","malware_download","exe|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-11 05:18:02","http://timlinger.com/doc/En_us/8-Past-Due-Invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-09-06 14:34:07","http://timlinger.com/doc/En_us/8-Past-Due-Invoices","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-28 04:12:53","http://timlinger.com/0811965OTHXLT/BIZ/Smallbusiness/","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-27 13:15:17","http://timlinger.com/0811965OTHXLT/BIZ/Smallbusiness","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-22 22:24:40","http://timlinger.com/279590NRY/SEP/Smallbusiness/","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-21 08:41:49","http://timlinger.com/279590NRY/SEP/Smallbusiness","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-17 20:54:03","http://timlinger.com/9846VIC/SEP/Business/","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-17 09:07:11","http://timlinger.com/9846VIC/SEP/Business","offline","malware_download","doc|emotet|heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-16 13:23:05","http://r2v2.co.uk/hermmmy.exe","offline","malware_download","AgentTesla|exe","r2v2.co.uk","216.37.42.224","17054","US" "2018-08-16 06:04:25","http://timlinger.com/Wellsfargo/Smallbusiness/Aug-14-2018/","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-15 23:20:28","http://timlinger.com/Wellsfargo/Smallbusiness/Aug-14-2018","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-13 22:21:07","http://timlinger.com/428YAFILE/INTD68945631159EQWGE/579725/BQ-TQU/","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-10 08:20:40","http://timlinger.com/428YAFILE/INTD68945631159EQWGE/579725/BQ-TQU","offline","malware_download","doc|emotet|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-08-06 04:49:02","http://timlinger.com/rM/","offline","malware_download","","timlinger.com","216.37.42.32","17054","US" "2018-08-04 06:13:29","http://timlinger.com/rM","offline","malware_download","emotet|exe|Fuery|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-07-30 17:52:22","http://timlinger.com/Tracking/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-07-26 03:57:22","http://timlinger.com/default/En/ACCOUNT/invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-07-24 05:35:11","http://timlinger.com/doc/US_us/STATUS/Services-07-20-18-New-Customer-NZ/","offline","malware_download","doc|emotet|epoch2|Heodo","timlinger.com","216.37.42.32","17054","US" "2018-06-12 00:38:05","http://electriquestew.com/IRS-Tax-Transcipts-014/16/","offline","malware_download","doc|emotet|epoch1|Formbook|Heodo","electriquestew.com","216.37.42.12","17054","US" "2018-06-07 15:48:10","http://electriquestew.com/ups.com/WebTracking/PT-41866471/","offline","malware_download","doc|emotet|epoch1|Heodo","electriquestew.com","216.37.42.12","17054","US" "2018-06-05 15:28:03","http://electriquestew.com/ups.com/WebTracking/LU-91550486437/","offline","malware_download","doc|emotet|Heodo","electriquestew.com","216.37.42.12","17054","US" "2018-06-04 11:55:33","http://electriquestew.com/Vos-facture-impayee/","offline","malware_download","Heodo","electriquestew.com","216.37.42.12","17054","US" "2018-05-30 14:55:10","http://electriquestew.com/ups.com/WebTracking/YHN-538786226/","offline","malware_download","Heodo","electriquestew.com","216.37.42.12","17054","US" "2018-05-24 08:08:49","http://electriquestew.com/Client/Invoice-965577/","offline","malware_download","doc|emotet|heodo","electriquestew.com","216.37.42.12","17054","US" "2018-04-27 10:22:55","http://studiojuliakay.com/ucsf/kahsx.exe","offline","malware_download","exe|Formbook","studiojuliakay.com","216.37.42.18","17054","US" "2018-04-24 13:45:16","http://numediamarketing.com/NmFYh4/","offline","malware_download","emotet","numediamarketing.com","64.255.249.41","17054","US" # of entries: 98