URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 192.210.240.37
Firstseen:2022-05-17 11:08:03 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-05-17 11:08:09 192.210.240.37192-210-240-37-host.colocrossing.comNot listedAS36352 AS-COLOCROSSING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-07-07 15:25:34http://192.210.240.37/u/uxx.exe/n/nOfflineAnonymous
2022-07-07 15:25:34http://192.210.240.37/n/ktu.exe/n/nOfflineAnonymous
2022-06-09 11:12:04http://192.210.240.37/j/hkn.exeOfflineexe Formbook ext opendir abuse_ch
2022-06-08 22:56:04http://192.210.240.37/u/uxx.exeOffline32 exe Formbook ext zbetcheckin
2022-06-08 22:56:04http://192.210.240.37/n/ktu.exeOffline32 exe Formbook ext zbetcheckin
2022-06-08 22:56:04http://192.210.240.37/o/vrg.exeOffline32 exe Formbook ext zbetcheckin
2022-06-08 22:28:04http://192.210.240.37/gb/vio.exeOfflineexe Formbook ext AndreGironda
2022-05-31 17:22:04http://192.210.240.37/n/gbp.exeOffline32 exe Formbook ext zbetcheckin
2022-05-31 16:47:04http://192.210.240.37/g/pdp.exeOfflineexe Formbook ext AndreGironda
2022-05-20 12:37:04http://192.210.240.37/d/zmb.exeOfflineexe Formbook ext opendir abuse_ch
2022-05-18 10:42:05http://192.210.240.37/n/bta.exeOffline32 exe Formbook ext zbetcheckin
2022-05-17 11:08:09http://192.210.240.37/b/btx.exeOfflineexe Formbook ext opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-06-09 11:12:0432622f2f315447a8484107381c2bf54c8926ee6af14d50219a8c9a0e3d46ae2fexeFormbook
2022-06-09 07:50:12a0aae68e1ba0ebcf0cdc3c9d6112f82f5af337d13a0e7d5178fa20d04e162beeexe  
2022-06-08 22:56:049b44edc422a53146c9e003fd7da2917f101edd15916260a9d41642b43a278bc3exeFormbook
2022-06-08 22:56:048e0c0ad384c5382541b6c2e3780c8204db5dee5b69f6474c5b7f8e53cb0bd2e1exeFormbook
2022-06-08 22:56:04a0346659004b517cc8d1b9e59f24c9a7fdbcff0d4f0b9e49f686fa8de1697f2bexeFormbook
2022-06-08 22:28:0479a31aea4e37d41e6bdb99e35c35a1d92e5d9f04a47dc89b30b4c0a097d571c6exeFormbook
2022-06-02 06:18:151f8b3f9a5f88cf10c1f4bcd5d709704c147b15b72693072bd3dd2e8c461be9f0exe Formbook
2022-06-01 05:46:29b8b72b9f382c1fcb749422ba615d3458a4715d131e6f389b1b0d8768e2f5144bexe  
2022-06-01 05:31:0144c1c521c22a3244d33d4f6eccde2e79a7c55388cdea1764cba5b4d07fd45633exe Formbook
2022-05-31 20:58:068475d63228f30259a96c4b9f523b4fb05f718c6361a1f3d477cba240f0ce7b5eexeFormbook
2022-05-31 20:57:35d4b5eed08e106de325ab64d4d0276f19c9a3bea48a8c3f8ac3b5a1ea932081daexeFormbook
2022-05-31 20:30:08366c528ea4a4b38db44ce2042899f6f4c42d699bbae6f570cda55d9a54308128exe Formbook
2022-05-31 17:22:04b11153930f782739246ba8278966eb1af994f843f652f1e9917bad6becce6f79exeFormbook
2022-05-31 16:47:04e725fd8a3756dc36865d339674db4ceb70a1c6e7ca718af396cff43a4d56159fexeFormbook
2022-05-20 12:37:04bfb973a2a005029171ef58cc29552235909ffffeeed05f5c5d469cdd6d8424ccexeFormbook
2022-05-18 10:42:05a342e8f2472ac316cab1017fc24f46d8206390f90448b91d62b9225aa3d2e229exeFormbook
2022-05-17 11:08:044c8956ad9aa80821657a61c424c56e194c285b4f675faa653623fab276a40242exeFormbook