URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 195.140.147.188
Firstseen:2022-02-05 15:32:03 UTC
Total malware sites :20
Online malware sites :0 (0%)
Offline Malware sites :20 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-02-05 15:32:06 195.140.147.188default.clo.ruNot listedAS29182 RU-JSCIOT- RUyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-02-05 16:07:08http://195.140.147.188/files/nnsteam/nnsteam_1.exeOfflineCoinMiner exe zbetcheckin
2022-02-05 16:07:06http://195.140.147.188/files/XxxrendypelxxX/Xxx...Offline32 dcrat exe zbetcheckin
2022-02-05 16:07:05http://195.140.147.188/files/nnsteam/nnsteam_2.exeOffline32 exe RedLineStealer ext zbetcheckin
2022-02-05 16:07:05http://195.140.147.188/files/nnguy/nnguy_1.exeOfflineCoinMiner exe zbetcheckin
2022-02-05 16:06:09http://195.140.147.188/files/BARRACUDA1224/BARR...OfflineCoinMiner exe zbetcheckin
2022-02-05 16:06:09http://195.140.147.188/files/LolzBIT/@LolzBIT_1...OfflineCoinMiner exe zbetcheckin
2022-02-05 16:06:09http://195.140.147.188/files/BARRACUDA1224/BARR...Offline32 dcrat exe zbetcheckin
2022-02-05 16:06:07http://195.140.147.188/files/nnguy/nnguy_2.exeOffline32 exe RedLineStealer ext zbetcheckin
2022-02-05 15:50:07http://195.140.147.188/files/gar181/gar181.exeOffline32 dcrat exe zbetcheckin
2022-02-05 15:50:06http://195.140.147.188/files/F1yDi/F1yDi_2.exeOffline32 exe RedLineStealer ext zbetcheckin
2022-02-05 15:49:09http://195.140.147.188/files/Bebraesportss/Bebr...Offlineexe zbetcheckin
2022-02-05 15:49:08http://195.140.147.188/files/F1yDi/F1yDi_1.exeOfflineCoinMiner exe zbetcheckin
2022-02-05 15:49:06http://195.140.147.188/files/nnguy/nnguy.exeOffline32 exe zbetcheckin
2022-02-05 15:49:06http://195.140.147.188/files/Bebraesportss/Bebr...Offline32 dcrat exe zbetcheckin
2022-02-05 15:49:06http://195.140.147.188/files/H_Loader1.exeOffline32 exe RedLineStealer ext zbetcheckin
2022-02-05 15:48:08http://195.140.147.188/files/XxxrendypelxxX/Xxx...OfflineCoinMiner exe zbetcheckin
2022-02-05 15:48:08http://195.140.147.188/files/gar181/gar181_1.exeOfflineCoinMiner exe zbetcheckin
2022-02-05 15:32:06http://195.140.147.188/files/lyblin/lyblin.exeOffline32 exe zbetcheckin
2022-02-05 15:32:06http://195.140.147.188/files/lyblin/lyblin_1.exeOfflineCoinMiner exe zbetcheckin
2022-02-05 15:32:06http://195.140.147.188/files/lyblin/lyblin_2.exeOffline32 exe RedLineStealer ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-02-05 16:07:0822cf3626d49aff732cf49c6c119c23acf78658ac703719dfb8ee5f83fcb9708bexeCoinMiner
2022-02-05 16:07:06c41d9c68c367fdf7651d35bc0d85b950681ac26df3f65a05bfbf9af19d3dd368exeDCRat
2022-02-05 16:07:05e19a6d86ae39ed1dbbe9b2e092e31133ebc9f2b071c72a98bb5a09dc27d53493exeRedLineStealer
2022-02-05 16:07:058dd0db265da1807eb1564337219862278e347d5aac40ac2d9bc1e6c22241f713exeCoinMiner
2022-02-05 16:06:09c471a7d1efb47a817be82dabe73c69c038600746fc2945f5434363577d98448bexeCoinMiner
2022-02-05 16:06:0956719990cf05483cd79512ca1d376baca27c1364fe110a6f9ea23cd53f8dcdebexeCoinMiner
2022-02-05 16:06:08911860ba2f0c1d6b668bc865e77cdd09ef29682fa0ea39846b0affef39fa9e61exeDCRat
2022-02-05 16:06:064951979c61129c8e58a18dfa428d3a0fa872f6b9c28101aa5d12d4c71fa45cedexeRedLineStealer
2022-02-05 15:50:07ad4c13e847384a5ed8640ea6bd4c42c97f55eef4ce21d11224b89d818e0cf74fexeDCRat
2022-02-05 15:50:068f24ab6099e8b87822d26c4fab9e6d6f308dcaf2d486e6e51cad747a2fbd75c3exeRedLineStealer
2022-02-05 15:49:094c20cb035c923c914c129daa6f7dd77c24d3d3ad58f09c89a12d8028405bb5d0exe 
2022-02-05 15:49:08667886b0ff35cefcc45ccb1c78e6738fa1203d439d0ddadebd36c31d61dde885exeCoinMiner
2022-02-05 15:49:06a4c7cb6d7212aac61a61a4f7c7c218684a8ea7727ebf26c4bf9b4f98c39a86c4exe 
2022-02-05 15:49:06427abc2035bd94beb2512e021757f81b9fbac201eb72018296889a8509e56072exeDCRat
2022-02-05 15:49:061ed5934c95292cf6d732ae068e1ef5e5c057088b199031e8be45eaf26a475c67exeRedLineStealer
2022-02-05 15:48:081a597ff0090a8631f642c4b9223939fbb3535ebc8b001f1223aaeab9fbaa8d0fexeCoinMiner
2022-02-05 15:48:075abd0dd9cfbf6f323c0737b139b0daea3f568da4f95fe862b66b74ba3fc04ebeexeCoinMiner
2022-02-05 15:32:060228149fc99d9323a5f2cfe773e1fac2652c043b1e591d4270472b08df7d85e8exeCoinMiner
2022-02-05 15:32:0505624102a4432c069b4731553fe2fe3a9143161cf4e38ad5b8197378dbda1300exe 
2022-02-05 15:32:0583192912fec0c2f7c3e4e350f8722aea77fb085e78e577016675a1f0ee6a4efaexeRedLineStealer