URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 37.139.129.107 |
|---|---|
| Firstseen: | 2022-12-11 03:30:05 UTC |
| Total malware sites : | 5 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 5 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-12-11 03:30:12 | 37.139.129.107 | Not listed | AS210218 OpenFiber-Italy |  IT | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-01-04 06:48:03 | http://37.139.129.107/bins/LB3.exe | Offline | exe |  jstrosch |
| 2022-12-28 06:32:05 | http://37.139.129.107/bins/Clipper.exe | Offline | exe x64 | jstrosch |
| 2022-12-23 17:14:04 | http://37.139.129.107/bugatti/bd.exe | Offline | exe RaccoonStealer  | jstrosch |
| 2022-12-23 17:14:04 | http://37.139.129.107/bins/agent.exe | Offline | exe RemcosRAT | jstrosch |
| 2022-12-11 03:30:12 | http://37.139.129.107/downloads/bins/stub.exe | Offline | dropped-by-amadey Smoke Loader |  viql |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-12-29 15:34:55 | 4a7fa40eae6a4fc366ef98fb9f8343d0d48713acb3f88e5699c5e18a161a1b86 | exe | RaccoonStealer | |
| 2022-12-28 06:32:04 | e177d2d9b643a524b6763f7cd92f66a3ec61281eff9001a1bf0c5226dc181ac8 | exe | ||
| 2022-12-27 14:48:39 | 85f8cc08adebd0f0fde64c59d5359524b63dbd9ae317349557aca86750eb12e6 | exe | RaccoonStealer | |
| 2022-12-23 17:14:04 | fc0cb0682ccc37bdd72fab5106d45ebf7fb014b15004d65d627f6e2aed0750b4 | exe | ||
| 2022-12-23 17:14:04 | f7f8d1ebfed3afd13eb47392a7f502603ecb970a817c221682cd8f2a17ff2bb3 | exe | RemcosRAT | |
| 2022-12-11 03:30:06 | c7c03c2d6a78eb79409a53304bfaf8a69334d2f6a5928db641092bcc39dc8e8d | exe | Smoke Loader |