URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 107.174.138.144
Firstseen:2022-02-15 20:13:03 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-02-15 20:13:05 107.174.138.144107-174-138-144-host.colocrossing.comNot listedAS36352 AS-COLOCROSSING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-08 16:54:04http://107.174.138.144/kmk/baa.exeOfflineexe Formbook ext AndreGironda
2022-03-03 09:46:04http://107.174.138.144/gam/bro.exeOfflineexe Formbook ext opendir abuse_ch
2022-03-01 09:04:05http://107.174.138.144/aam/boo.exeOfflineexe Formbook ext opendir abuse_ch
2022-03-01 09:02:06http://107.174.138.144/bam/sex.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-24 18:25:05http://107.174.138.144/mov/me.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-23 15:46:05http://107.174.138.144/obo/bbb.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-23 12:54:05http://107.174.138.144/dmd/gon.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-18 09:05:05http://107.174.138.144/lod/kam.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-16 19:13:04http://107.174.138.144/abu/abl.exeOfflineexe Formbook ext opendir abuse_ch
2022-02-16 16:01:04http://107.174.138.144/aaa/bbb.exeOfflineFormbook ext xloader James_inthe_box
2022-02-15 20:14:04http://107.174.138.144/boy/eye.exeOfflineAgentTesla ext exe opendir abuse_ch
2022-02-15 20:13:05http://107.174.138.144/dey/men.exeOfflineexe Formbook ext opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-08 16:54:044ba1bb8220fe9f1c374cf2583459ac05af4ecf4a0ed023f42cac04da0dd0ea8bexeFormbook
2022-03-03 09:46:0438444024682d6ea391135d374ecd6f457bb01df512801e25fcbd2931afe58d92exeFormbook
2022-03-01 13:00:11cee2290e27d378faacd5a9ab5fc579e912c1ecee9db29e4e79d8b9cd7ee10c94exeFormbook
2022-03-01 09:04:0554d3a5ab9cf83b63a50a382b1f3fe4f2bdc03620744b9ecdee74723415fccd9dexeFormbook
2022-03-01 09:02:0554d3a5ab9cf83b63a50a382b1f3fe4f2bdc03620744b9ecdee74723415fccd9dexeFormbook
2022-02-24 18:25:05aa112ed45fdbe4d9e70479dce507d4c8b3d5ceae3d2107e83d87a7c84eac6294exeFormbook
2022-02-24 10:06:03aa112ed45fdbe4d9e70479dce507d4c8b3d5ceae3d2107e83d87a7c84eac6294exeFormbook
2022-02-24 09:41:05aa112ed45fdbe4d9e70479dce507d4c8b3d5ceae3d2107e83d87a7c84eac6294exeFormbook
2022-02-23 15:46:05e812adcd8f8470a1be64d92dafaebf717db1c45d58fe04a9160d88a468cf7e3cexeFormbook
2022-02-23 14:15:51e812adcd8f8470a1be64d92dafaebf717db1c45d58fe04a9160d88a468cf7e3cexeFormbook
2022-02-23 12:54:050b7b92e40a75e7c96676e65733f2babfdf0c37529c130619510b2b0b7879a697exeFormbook
2022-02-18 09:05:0525061f65fd6ccf3ba5ffee1beeae8dde4a05a8e8bee1873010732828111c83c2exeFormbook
2022-02-16 19:13:049bd40dc608fbfece64be8707069dc0284f2b358d2c3a164e326e6e602914d4dcexeFormbook
2022-02-16 16:01:04e803c5d292e1684844ff0ac82e76ca90caca1e44e7cd3507ce4ee4507b9d9fb2exeFormbook
2022-02-15 20:14:0495909dd178ff05628ceba421b088e8be135512ee4b9d2eb026e6ebbc0c9aa37fexeAgentTesla
2022-02-15 20:13:046bdb733cb3f2afe0506cd8959953fd4ade7efaf636e211f99fd6c6aea06e3bddexeFormbook