URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 179.43.140.150
Firstseen:2021-04-01 16:03:02 UTC
Total malware sites :11
Online malware sites :0 (0%)
Offline Malware sites :11 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-04-01 16:03:05 179.43.140.150hostedby.privatelayer.comNot listedAS51852 PLI-AS- CHyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-08-20 06:55:08http://179.43.140.150/clients/client.shOffline bjornruberg
2021-09-02 13:41:03http://179.43.140.150/ltmq/izuzx.exeOfflineexe Formbook ext abuse_ch
2021-06-24 08:30:04http://179.43.140.150/issr/nj.exeOffline32 AgentTesla ext exe zbetcheckin
2021-06-07 08:09:04http://179.43.140.150/issr/br.exeOfflinebitrat ext exe rat abuse_ch
2021-06-06 06:26:05http://179.43.140.150/koze/update.exeOfflineCoinMiner exe zbetcheckin
2021-06-06 06:26:05http://179.43.140.150/issr/as.exeOfflineAsyncRAT ext exe rat zbetcheckin
2021-05-28 15:48:03http://179.43.140.150/grvv/gim.exeOfflineAveMariaRAT ext exe rat abuse_ch
2021-05-17 14:28:04http://179.43.140.150/gzst/INVOICE%20CONFIRMATI...OfflineAgentTesla ext exe ffforward
2021-04-16 17:37:03http://179.43.140.150/shtq/fack.jpgOfflineDESKTOP-group NanoCoreRAT ext c_APT_ure
2021-04-07 11:10:05http://179.43.140.150/grvv/put.exeOfflineremcos ext RemcosRAT ext Anonymous
2021-04-01 16:03:05http://179.43.140.150/shtq/Fake.jpgOfflineDESKTOP-group remcos ext c_APT_ure

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-08-31 14:12:08891dc95bd58b707b3436c85f168155b19761b2e6c02befb1749f675a00e48369elf  
2022-08-30 05:27:008e9f7e2a5d0cbb362f92e6cceee015bd179e91593b39ddce84ea1f44cfe85fefelf  
2022-08-29 02:45:105611b763f90857a33851ddb561f6c47facf021a17883471318f6d0d53b4daa29elf  
2022-08-28 16:53:1278ce1c1c876a67c70eeb6f97ff5d2cee8d63f03c994cbe7e43884ed9af63e7d0elf  
2022-08-28 04:23:10ce50286ce6efdca3f70d5371bc36bd4bda105067b8daa749ded6924bc5493b2celf  
2022-08-28 02:56:54369052e473a028c2fd8cffd9059d68330f1db11875841337aae299a11cdd3ba8elf  
2022-08-27 11:20:38be1280f049cd944a9b13c1586e5511ea2c2eef947eff625134c5062a9a895c8belf  
2022-08-26 04:46:59e75b1d68e77751fad3400d5a27f46c373b5328a2c18f38bfafa832b22c885c47elf  
2022-08-25 06:24:4229ec7598e1941e7b90dbd3e9c8a75731270c3c35d4b3920ab886efa1e7c70440elf  
2022-08-24 18:05:200b346c5b16db88cdc67d3acfe7cf9d894415ddaa959b15444160f309fea6f0f1elf  
2022-08-24 15:32:4502ea0ea5a15f24da1aad6d616b0b560ed38ae5f58dc30c467406e6eb8edb9777elf  
2022-08-24 07:14:3097fe1a4d2d187e9a6f53c705e24fceed7d738760f71163eb84e0fb5af6928de7elf  
2022-08-24 06:35:14d2ffa74458779db0d3c51cff85500d4882c86f6978d0930540f16cfa9be17f17elf  
2022-08-23 13:57:40d72f32cd6a7c2fb0ec31fb5bada37a08818c91dd449fb257ff0a58c531f93f13elf  
2022-08-23 12:53:06a10c85729dd56a5015953be12ff682eeb79a6e1d32292417cce45abed7d0b23delf  
2022-08-22 18:18:36c2e6f24fea38c2b6bb41725b891421d03110354a675e277adce83ecdff269f0celf  
2022-08-22 15:19:58906a2a073217667102a00e07fdeeec2bd9b297597dc81af87ee420436831f905elf  
2022-08-22 11:44:34e56f31bb07a94b14417761a4d087f10011751c751656fef08d7543be9353be1belf  
2022-08-22 10:55:582a7da8d63b8dd72d63635ab1f60c6719b88d2a1165e2c9eed74e5f738c15822aelf  
2022-08-22 07:42:104b2ae5e417f41a353931f30c9a1c81f8d68301ef2745650078fb054f6dcabe49elf  
2022-08-22 03:59:237e1cecb80168cd12ff70aabb218123aaffcb40cc598b10652153e262200fb22eelf  
2022-08-21 23:25:433cd364945894e793a36d1410fd7dcd92043baccbea0ab3a0b7c9d99357beed73elf  
2022-08-21 18:14:05cf9a986d766d195c9e965fff35cfbdd0565889c78a6ba8ae67bc94a12903d85felf  
2022-08-21 17:07:15836d34fbb437e4a7f779cb8a6e3d6c4a9e3018991549c22a4c470f1e9fb5af24elf  
2022-08-20 19:47:199c27de02ade98801c1dbbf1cbdfc6df7e5248282349c407d4d221578feb8c3a3elf  
2022-08-20 09:48:456d576c3a05caba37c7bb09a6cf21b2fe9fcf905ba7a0c839982d3ba2ff7a29dbelf  
2022-08-20 09:09:1067b9168400864a206a7fb14f3489e719e665d0d10916f46a0168ada592e608a8elf  
2022-08-20 07:47:32b28aa00ba8a766cb4b4900ccad945f286c319ada9e8c8ffe746151b4892f24c5elf  
2022-08-20 06:55:08ad2d2ae296c85792794bdf2d77efa5f56d07846f091037661392c697febaebb8elf 
2021-09-02 13:41:03ca4e8b9f939327da017d8625121beeba12321a66ada9d6c65d21a02d8194f3caexeFormbook
2021-06-24 08:30:0425252dc64356eeac34d104ce0527404eb133cb01cb15d0e5c45faa9a78ae5388exeAgentTesla
2021-06-07 08:09:043f5830ed51bc3d293293aa82e69232dc54c8b679f4dcfcc6b6465d240439a0faexeBitRAT
2021-06-07 02:49:22378f88cc9bbe98557c78d51f384d2156a42f4a00d0c76f830e715c99650715b1exeAsyncRAT
2021-06-06 06:26:051971aaa4c1e2be5b5a60d2b622f97b93366d720497f16e1e7423d388b5805c8cexe CoinMiner
2021-06-06 06:26:043f18c846952902badceaaf870f321598465a785963e098a621d7660aceffdbecexeAsyncRAT
2021-05-28 15:48:03b13062238be8506b9f608dc7a77e6947e966c9ccc3ce5354f09c95e0b4e4ce77exe AveMariaRAT
2021-05-17 14:28:04aeb1d45af6f7d6d4887e417bd8cdf77feed666b99cd255bfabbe5327a8720734exeAgentTesla
2021-04-07 12:33:290a049a6f200348e229ebaa13728cd0d19de4839c741d4faec3dd64207860153dexeRemcosRAT
2021-04-07 11:10:054a7f380de68e6969bcedffe6c7d5b01ac9ecd1f4df9f2bb79fb7fec94252e095exeRemcosRAT