URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 207.167.64.122
Firstseen:2022-09-07 02:18:03 UTC
Total malware sites :33
Online malware sites :0 (0%)
Offline Malware sites :33 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-11-09 07:14:04http://207.167.64.122/Gemsy_Bacpjyfg.jpgOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Enagbjo.jpegOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Qeaoctma.jpegOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Owwkwnrknk.bmpOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Ustnyuhwg.bmpOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Rmzkuhnt_Vfiqluce.jpgOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Cdvviknx.bmpOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Ksbumwrb.bmpOffline abuse_ch
2022-11-09 07:14:04http://207.167.64.122/Kpaim.pngOffline abuse_ch
2022-11-08 13:04:08http://207.167.64.122/Gxqwgz.jpegOfflineAnonymous
2022-11-08 13:04:06http://207.167.64.122/Saufmqaqo.exeOfflineAgentTesla ext Anonymous
2022-10-27 15:51:06http://207.167.64.122/Document_detail23562-pdf.exeOfflineexe Formbook ext abuse_ch
2022-10-22 04:37:04http://207.167.64.122/nine.exeOffline32 exe Formbook ext zbetcheckin
2022-10-04 10:25:06http://207.167.64.122/rain2.exeOffline32 exe Formbook ext zbetcheckin
2022-09-30 10:40:04http://207.167.64.122/Vcgkusne_Rhxolbsd.jpgOfflineencrypted PureCrypter abuse_ch
2022-09-30 10:40:04http://207.167.64.122/Lqpagcqic_Nnrczkeo.jpgOfflineencrypted PureCrypter abuse_ch
2022-09-30 10:30:07http://207.167.64.122/NEWSXE.exeOfflineexe Formbook ext abuse_ch
2022-09-21 06:04:04http://207.167.64.122/Vcgkusne.exeOffline32 exe Formbook ext zbetcheckin
2022-09-19 16:35:05http://207.167.64.122/Wmaut_Qpgucapm.pngOfflineencrypted PureCrypter abuse_ch
2022-09-19 16:35:04http://207.167.64.122/Wmaut.exeOfflineexe SnakeKeylogger ext abuse_ch
2022-09-19 07:57:05http://207.167.64.122/Pcgtcaup_Zuxpmodl.pngOfflineencrypted PureCrypter abuse_ch
2022-09-19 07:57:04http://207.167.64.122/Pcgtcaup.exeOfflineexe SnakeKeylogger ext abuse_ch
2022-09-19 07:57:04http://207.167.64.122/Juygxxwk_Gipqkngd.pngOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:48:04http://207.167.64.122/Parrplts.exeOfflinePureCrypter abuse_ch
2022-09-15 11:47:05http://207.167.64.122/Uwrnvaml_Tzsbtpng.pngOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Uwrnvaml.exeOfflineexe SnakeKeylogger ext abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Parrplts_Kqgznscv.jpgOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Mkidhnplh_Svwilxrm.bmpOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Gqbinrrq.exevOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Ezufb_Deoqvjqr.jpgOfflineencrypted PureCrypter abuse_ch
2022-09-15 11:47:04http://207.167.64.122/Ghpxp_Hqhhggmu.bmpOfflineencrypted PureCrypter abuse_ch
2022-09-07 16:15:07http://207.167.64.122/arab.scrOfflineexe SnakeKeylogger ext zgRAT abuse_ch
2022-09-07 02:18:08http://207.167.64.122/Vlrupb.exeOffline32 exe zgRAT zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-11-08 13:04:08f4c04f53676000693264e995a35d32d5c7fd2c9e4be5e4c9a6204cbd90107136unknown  
2022-11-08 13:04:0640f4747ea2ffa3c449e6ed8b5c360a9ecc5348417ae953ff15ad4c902a162314exeAgentTesla
2022-10-27 15:51:068f2d73414e79953821863a7b62dfb4904a67c912d323b0e7093e58b4886605ecexeFormbook
2022-10-22 04:37:04bee7caa1a042650d1a8c5aa8faa30e6eee11013337fe603afad324e0b274b891exeFormbook
2022-10-04 10:25:055873c131ad87badb7096ee6203f18a9ff0964a4718c0260776a351ad90be6aaaexe Formbook
2022-09-30 10:30:07efb10cca23c4ed132ed9e516dee40bb2906696b91983947507cd05cb9561f6b3exeFormbook
2022-09-21 06:04:046c03c06e1fecca519e1c8dcc0ed68788b0b11bbdb56c328ef44361a5ff8f84ceexeFormbook
2022-09-19 16:35:058d787cc36174231a3b6ef526e03786baf6f7b66bd6573ef9b33f3977f1a9f657unknown  
2022-09-19 16:35:048c6ab69414795a94e56e4ed544a7e77219ea9c902d9f2da22bf3f86482d87f0fexeSnakeKeylogger
2022-09-19 07:57:05b4f9282c2c17fe2a41bee7ab82c9faf6f1c4f644e482463c1dde55066e22d758unknown  
2022-09-19 07:57:04ea35e42d52c75041cd5fe711d7f9b05e8c09886d6450644a5a0b86b069e9bd99exeSnakeKeylogger
2022-09-15 11:47:05886e5cfeb07d3a19ea3f7dccf28638c7e3f16644a89832c33ea3d1f8f196f27eunknown  
2022-09-15 11:47:04355b18ca44025c424c0bf3da04f660ea392237275a27158bdc746897b560c1dfexeSnakeKeylogger
2022-09-07 16:15:070aab4614ce8b4e67cbd8db5e51000f73a581ef4bce1a7211c4311aebb9715544exezgRAT
2022-09-07 02:18:072231ea9133d7645eb30c77c53ce1417ab1086dd262fb9e1064eb899f8d8517a6exezgRAT