URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 194.180.48.72 |
|---|---|
| Firstseen: | 2023-07-05 14:49:04 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 7 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-07-05 14:49:06 | 194.180.48.72 | Not listed | AS201814 Mevspace |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-09-17 01:47:04 | http://194.180.48.72/50/igccu.exe | Offline | 32 exe |  zbetcheckin |
| 2023-09-15 11:00:09 | http://194.180.48.72/60/igccu.exe | Offline | 32 exe Formbook  | zbetcheckin |
| 2023-09-15 07:09:04 | http://194.180.48.72/19/hkcmd.exe | Offline | exe Formbook opendir |  abuse_ch |
| 2023-09-15 06:42:04 | http://194.180.48.72/18/hkcmd.exe | Offline | exe Formbook | abuse_ch |
| 2023-08-10 05:00:08 | http://194.180.48.72/SDR.exe | Offline | 32 exe LummaStealer | zbetcheckin |
| 2023-08-09 06:01:11 | http://194.180.48.72/dns.exe | Offline | dropped-by-SmokeLoader LummaStealer |  Casperinous |
| 2023-07-05 14:49:06 | http://194.180.48.72/SDK.exe | Offline | dropped-by-PrivateLoader remcos RemcosRAT |  andretavare5 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2023-09-17 01:47:04 | 7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427 | exe | ||
| 2023-09-16 13:35:38 | 7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427 | exe | ||
| 2023-09-16 13:30:24 | 7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427 | exe | ||
| 2023-09-16 13:23:43 | 7ba6a82afff9a6b0025f0aaa0ed5719b43fc9e7dc9144ed56a39c9771a643427 | exe | ||
| 2023-09-15 11:00:09 | de4ef75364ba63f25b2e9a05fc2114b0a7d82018616a7b70e4000359ff2b0078 | exe | Formbook | |
| 2023-09-15 07:09:04 | 8f17f8b8946c0aa9f92bd114a1501e9109a3acd84b865d352d043a04e474c2b5 | exe | Formbook | |
| 2023-09-15 06:42:04 | 8f17f8b8946c0aa9f92bd114a1501e9109a3acd84b865d352d043a04e474c2b5 | exe | Formbook | |
| 2023-08-10 05:00:08 | 77e6f34b7675763be9933089c4d4d52847b435684c026b5e4585e4708b2f3bcb | exe | LummaStealer | |
| 2023-08-09 06:01:11 | 77e6f34b7675763be9933089c4d4d52847b435684c026b5e4585e4708b2f3bcb | exe | LummaStealer | |
| 2023-07-05 14:49:06 | 259548fd502ac150fb83988b9f8c3c49364909a5bea4bf71a168ff63d66f4afd | exe | RemcosRAT |