##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2026-09-26 08:01:20 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS213887
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2026-05-31 07:19:26","http://87.120.92.182/bins/ppv","offline","malware_download","elf|ua-wget","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:05:07","http://87.120.92.182/bins/sh4","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:19","http://87.120.92.182/bins/arm","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:19","http://87.120.92.182/bins/spc","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:19","http://87.120.92.182/bins/x86","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/arm6","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/arm7","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/dbg","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/FUCKJEWS.sh","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/i686","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/m68k","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/mips","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/mpsl","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/ppc","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:08","http://87.120.92.182/bins/x86_64","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2026-05-30 19:04:07","http://87.120.92.182/bins/arm5","offline","malware_download","mirai|opendir","87.120.92.182","87.120.92.182","213887","BG"
"2025-02-28 14:37:06","http://193.233.254.53/c824d1e0a60278fe/freebl3.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:06","http://193.233.254.53/c824d1e0a60278fe/mozglue.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:06","http://193.233.254.53/c824d1e0a60278fe/nss3.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:06","http://193.233.254.53/c824d1e0a60278fe/softokn3.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:05","http://193.233.254.53/c824d1e0a60278fe/msvcp140.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:05","http://193.233.254.53/c824d1e0a60278fe/sqlite3.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2025-02-28 14:37:05","http://193.233.254.53/c824d1e0a60278fe/vcruntime140.dll","offline","malware_download","dll|Stealc","193.233.254.53","193.233.254.53","213887","RU"
"2024-11-12 11:34:22","http://193.233.254.65/02.08.2022.exe","offline","malware_download","cobaltstrike","193.233.254.65","193.233.254.65","213887","RU"
"2024-11-03 04:04:07","http://193.233.254.0/cmaclient.exe","offline","malware_download","64|exe|Vidar","193.233.254.0","193.233.254.0","213887","RU"
"2024-11-02 16:06:55","http://193.233.254.0/pclient.exe","offline","malware_download","meduzastealer","193.233.254.0","193.233.254.0","213887","RU"
"2024-11-02 16:06:54","http://193.233.254.0/oclo.exe","offline","malware_download","meduzastealer","193.233.254.0","193.233.254.0","213887","RU"
"2024-11-02 16:05:15","http://193.233.254.0/elm.exe","offline","malware_download","meduzastealer","193.233.254.0","193.233.254.0","213887","RU"
"2024-11-02 16:05:15","http://193.233.254.0/responsibilityleadpro.exe","offline","malware_download","meduzastealer","193.233.254.0","193.233.254.0","213887","RU"
"2024-10-27 08:53:13","http://94.141.123.127/hidakibest.arm4","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:13","http://94.141.123.127/hidakibest.mpsl","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:13","http://94.141.123.127/hidakibest.ppc","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:13","http://94.141.123.127/hidakibest.sh","offline","malware_download","hidakibest|opendir|sh","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:13","http://94.141.123.127/hidakibest.sparc","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:11","http://94.141.123.127/hidakibest.arm5","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:11","http://94.141.123.127/hidakibest.arm6","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:11","http://94.141.123.127/hidakibest.arm7","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:11","http://94.141.123.127/hidakibest.mips","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-27 08:53:11","http://94.141.123.127/hidakibest.x86","offline","malware_download","elf|Gafgyt|hidakibest|opendir","94.141.123.127","94.141.123.127","213887","DE"
"2024-10-16 23:18:06","http://94.141.123.114/hidakibest.arm6","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:18:05","http://94.141.123.114/hidakibest.arm5","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:18:05","http://94.141.123.114/hidakibest.ppc","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.arm4","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.arm7","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.mips","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.mpsl","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.sh","offline","malware_download","mirai|opendir|sh","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.sparc","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-10-16 23:17:05","http://94.141.123.114/hidakibest.x86","offline","malware_download","elf|Gafgyt|mirai|opendir","94.141.123.114","94.141.123.114","213887","DE"
"2024-09-28 06:23:33","http://194.87.29.53/97f9710b31d15029/vcruntime140.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 06:23:30","http://194.87.29.53/97f9710b31d15029/mozglue.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 06:23:17","http://194.87.29.53/97f9710b31d15029/msvcp140.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 06:20:24","http://194.87.29.53/97f9710b31d15029/freebl3.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 06:04:49","http://194.87.29.53/97f9710b31d15029/nss3.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 05:59:54","http://194.87.29.53/97f9710b31d15029/softokn3.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-09-28 05:57:54","http://194.87.29.53/97f9710b31d15029/sqlite3.dll","offline","malware_download","dll|Stealc","194.87.29.53","194.87.29.53","213887","DE"
"2024-08-16 08:37:06","http://193.233.254.28:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e85481845","offline","malware_download","hookbot|spyware","193.233.254.28","193.233.254.28","213887","RU"
"2024-06-18 18:10:18","http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMg==&id=63a9f0ea7bb98050796b649e85481845","offline","malware_download","spyware|universe","193.233.254.79","193.233.254.79","213887","RU"
"2024-06-18 18:10:18","http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e85481845","offline","malware_download","spyware|universe","193.233.254.79","193.233.254.79","213887","RU"
"2024-06-18 18:10:18","http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtMw==&id=63a9f0ea7bb98050796b649e85481845","offline","malware_download","spyware|universe","193.233.254.79","193.233.254.79","213887","RU"
"2024-06-18 18:10:18","http://193.233.254.79:8080/getfile.php?download=YXBwLXJlbGVhc2UtNA==&id=63a9f0ea7bb98050796b649e85481845","offline","malware_download","spyware|universe","193.233.254.79","193.233.254.79","213887","RU"
"2023-06-22 06:34:25","http://193.233.134.57/puhatka/payload","offline","malware_download","RustyStealer|Stealc","193.233.134.57","193.233.134.57","213887","DE"
"2023-06-13 13:20:14","http://193.233.134.57/MarkoPolo/payload1","offline","malware_download","Stealc","193.233.134.57","193.233.134.57","213887","DE"
"2023-05-16 06:19:12","http://193.233.134.93/2bbda8fbc3a204ca/nss3.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:11","http://193.233.134.93/2bbda8fbc3a204ca/freebl3.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:11","http://193.233.134.93/2bbda8fbc3a204ca/mozglue.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:11","http://193.233.134.93/2bbda8fbc3a204ca/msvcp140.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:11","http://193.233.134.93/2bbda8fbc3a204ca/softokn3.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:11","http://193.233.134.93/2bbda8fbc3a204ca/sqlite3.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-05-16 06:19:10","http://193.233.134.93/2bbda8fbc3a204ca/vcruntime140.dll","offline","malware_download","dll","193.233.134.93","193.233.134.93","213887","DE"
"2023-04-25 15:06:11","http://193.233.134.117/shared/Ruzvelt.exe","offline","malware_download","dropped-by-SmokeLoader|Vidar","193.233.134.117","193.233.134.117","213887","DE"
"2023-04-24 10:02:10","http://193.233.134.115/shared/Ruzvelt.exe","offline","malware_download","SmokeLoader|Vidar","193.233.134.115","193.233.134.115","213887","DE"
# of entries: 72