URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 198.23.212.137
Firstseen:2021-08-03 18:16:02 UTC
Total malware sites :20
Online malware sites :0 (0%)
Offline Malware sites :20 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-08-03 18:16:05 198.23.212.137198-23-212-137-host.colocrossing.comNot listedAS36352 AS-COLOCROSSING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-31 08:58:04http://198.23.212.137/dthc/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-08-26 06:29:04http://198.23.212.137/axi/vbc.exeOfflineexe Loki ext abuse_ch
2021-08-24 06:20:04http://198.23.212.137/icic/vbc.exeOfflineLoki ext abuse_ch
2021-08-19 07:39:05http://198.23.212.137/dth/dt/vbc.exeOfflineexe opendir abuse_ch
2021-08-19 07:39:04http://198.23.212.137/dth/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-08-17 16:51:04http://198.23.212.137/rpm/rp/vbc.exeOffline32 exe Loki ext zbetcheckin
2021-08-17 08:09:05http://198.23.212.137/rpm/vbc.exeOfflineexe Loki ext abuse_ch
2021-08-11 15:12:04http://198.23.212.137/regedit/reg/vbc.exeOfflineLoki ext info_sec_ca
2021-08-11 15:12:04http://198.23.212.137/regedit/vbc.exeOfflineLoki ext info_sec_ca
2021-08-11 15:12:03http://198.23.212.137/document/pdf_rg234999233....Offline info_sec_ca
2021-08-11 15:12:03http://198.23.212.137/document/pdf_r34567888.htmlOffline info_sec_ca
2021-08-09 05:49:04http://198.23.212.137/arm/ar/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-08-05 14:39:03http://198.23.212.137/document/pdf_document_sw2...Offline info_sec_ca
2021-08-05 14:39:03http://198.23.212.137/document/pdf_document_s23...Offline info_sec_ca
2021-08-05 07:46:05http://198.23.212.137/swiss/vbc.exeOffline32 exe Loki ext zbetcheckin
2021-08-05 07:37:04http://198.23.212.137/swiss/sws/vbc.exeOffline32 exe Loki ext zbetcheckin
2021-08-04 04:08:04http://198.23.212.137/geo/vbc.exeOffline32 exe Loki ext zbetcheckin
2021-08-04 03:55:06http://198.23.212.137/geo/ceo/vbc.exeOffline32 exe Loki ext zbetcheckin
2021-08-03 18:25:04http://198.23.212.137/.------------------------...Offline info_sec_ca
2021-08-03 18:16:05http://198.23.212.137/windows/vbc.exeOfflineexe Loki ext opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-09-01 06:31:36533fd8da75df1b1ba32eb92e70fcc930920a8839736e50c043c5df11eed21dd2exeLoki
2021-09-01 05:44:27f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaexe 
2021-08-31 08:58:04f8efdc806be878faaf8c96d42603f505f207f034106779d8a1a356d1eab253d6exeLoki
2021-08-26 06:29:04a7a1a43d30f2cb7ee32934670de804b7a2c2961e2ef950339438eab91b1e438bexeLoki
2021-08-25 00:30:3037fc32834534585e428b56470b36be2b234b9813bf6d82cea9c1446fd72bc50cexeLoki
2021-08-24 06:20:048e166eb3487a243e21ddcfa8a88173a7f1b2b37de18a55f4517003027547fef6exeLoki
2021-08-19 07:39:05f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaexe 
2021-08-19 07:39:04a5edaf3e781977e82b6d645cf52e3c8987a69f707f6d6ef2377d9f7546f744e9exeLoki
2021-08-17 16:51:0433bfe1bb962c7e2fb6653cad9a0826c87931d2faa8c1d05f8d2ff4a7dfa339ceexeLoki
2021-08-17 08:09:05c56bc83a9e77b9ee422f659aaebab96027d0e5c57dce023a0f5939a96964d620exeLoki
2021-08-11 15:12:04d8bb1bb8587840321e74cf2ab2f3596344cbb5ffeb77060bd9aade848fed03fdexeLoki
2021-08-11 15:12:04324d549fb7b9999aa0e6fb8a6824f7a05fe5f1f21d76fb2d360cb34c56eb1995exeLoki
2021-08-10 00:24:569f66135d831d5ba4972ba5db9e0fd4515dfaecc92013a741679d6cddbe29ab25exeLoki
2021-08-09 05:49:04404ef33e86cd5e9d6705041d1bdf7e39108cd87705a83f53b8abb77a036340dbexeLoki
2021-08-06 00:01:29c2a568e116a85d6085f78797c6906be3986236bdebc72c8e50638798aed60503exeLoki
2021-08-06 00:00:05bc983b2e86ff88ab133c447395fb0caac565d33e7655c2671d1dec948e0bace8exeLoki
2021-08-05 07:46:05d586560a58ad44be9be80b819685a714d228d98596f1b44c4b08bdebc1c108dbexeLoki
2021-08-05 07:37:041935d61544f21904debb294ef949593b886ab06b97bb2a3f4f850bd2406a28d4exeLoki
2021-08-04 10:22:054729b8a41d24773d0cd4897ffd3f77e8b3014ba70b2cd6d2e765d5b02d33f0d0exeLoki
2021-08-04 09:27:475b2bfb4a5db00b69676c71f6700e741241bf79c0a625fe129191680c15b18138exeLoki
2021-08-04 08:56:52f751e7c6878e6b3165a3dc815468501cb14355222e75cb2f18afc3cd4565cbdcexeLoki
2021-08-04 08:17:44c71b7fdbdedbafbebf9dd7b0ed1764d49d7fb43b543be6e75e73311ad51a42ebexeLoki
2021-08-04 04:36:3231f2d19854f472577f6030dc0fd292d54b7ca737b6867024300141885733f302exeLoki
2021-08-04 04:08:04b48c2ac8f72c116687094de6d2b1fc1b1c2c5192ef6c9ca0df947a6e4066ac16exeLoki
2021-08-04 03:55:06d8fd483add70039091773d90366a84d118ad2df72fd7ae927c5791fe0327bec0exeLoki
2021-08-03 18:25:04984f8a4c42bf82aeabc60a3af5bac64a9f75f4b811902f7e5eadaa7ddd49f6b7unknown 
2021-08-03 18:16:04e9e36bd1b8aa447659150278e83976797ed8a5d73e580ca745e246b474a7539dexeLoki