URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 87.120.84.39
Firstseen:2024-10-29 13:20:05 UTC
Total malware sites :23
Online malware sites :0 (0%)
Offline Malware sites :23 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-10-29 13:20:16 87.120.84.39Not listedAS215439 PLAY2GO-NET- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-28 14:05:05http://87.120.84.39/txt/mydocfile.wbkOffline abuse_ch
2024-12-09 14:46:17http://87.120.84.39/txt/1gNxsab4efLTvZ5.exeOfflineexe abus3reports
2024-12-09 14:46:10http://87.120.84.39/txt/w1svdfWNYHVYMjK.exeOfflineexe MassLogger ext abus3reports
2024-12-09 14:44:55http://87.120.84.39/txt/agAWHfkktABCGLe.exeOfflineexe MassLogger ext abus3reports
2024-12-07 14:43:34http://87.120.84.39/txt/casseyofficefile.dotOffline abus3reports
2024-12-04 12:06:32http://87.120.84.39/txt/7ar1l60013Sx8PT.docOffline abus3reports
2024-12-04 12:06:32http://87.120.84.39/txt/d1wn7m0x0FWFbfs.docOfflineRemcosRAT ext abus3reports
2024-12-04 12:06:32http://87.120.84.39/txt/xi4HNTgb7wewrDQ.docOffline abus3reports
2024-12-04 12:06:32http://87.120.84.39/txt/xXdquUOrM1vD3An.docOffline abus3reports
2024-12-04 12:06:11http://87.120.84.39/txt/zxdonmn.docOfflineRemcosRAT ext abus3reports
2024-11-27 18:30:38http://87.120.84.39/txt/dattizxmn.dotOfflineAnonymous
2024-11-19 12:02:12http://87.120.84.39/txt/Xkl0PnD8zFPjfh1.wizOfflinelokibot ext VIPKeylogger nfsec_pl
2024-11-14 07:15:07http://87.120.84.39/txt/xXdquUOrM1vD3An.exeOfflineexe MassLogger ext VIPKeylogger abuse_ch
2024-11-13 07:33:08http://87.120.84.39/txt/blhbZrtqbLg6O1K.exeOfflineexe MassLogger ext VIPKeylogger abuse_ch
2024-11-13 07:33:08http://87.120.84.39/txt/blhbZrtqbLg6O1K.docOfflinedoc VIPKeylogger abuse_ch
2024-11-07 15:24:04http://87.120.84.39/txt/EN7nq8lm3v7yww0.docOfflineVIPKeylogger Riordz
2024-11-04 04:40:08http://87.120.84.39/txt/EN7nq8lm3v7yww0.exeOffline32 exe MassLogger ext zbetcheckin
2024-11-02 04:24:06http://87.120.84.39/txt/i3XZEp1kscPDMj7.exeOffline32 exe Formbook ext zbetcheckin
2024-11-01 06:08:06http://87.120.84.39/txt/nfeF2DeBp7q52qq.exeOffline32 exe Formbook ext zbetcheckin
2024-11-01 05:18:06http://87.120.84.39/txt/ZO7YvjlVmDJI9aJ.exeOffline32 exe NanoCore ext zbetcheckin
2024-11-01 03:48:06http://87.120.84.39/txt/iWQoPPlGHcvZxMy.exeOffline32 exe VIPKeylogger zbetcheckin
2024-10-30 06:31:09http://87.120.84.39/txt/di5NuAB6Dcw7EOV.exeOfflineexe Loki ext abuse_ch
2024-10-29 13:20:16http://87.120.84.39/txt/zxalphamn.docOfflineLoki ext rat abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-12-10 02:50:4189c504e0899a9b875b41e101cb38dd102adb6fb3bd5f76e5af6e2765b083aefcexe 
2024-12-09 14:46:0933cde8b96a04cb76b65cadc4ab706df69e05145a598c5fd47f80829ce72c24feexe MassLogger
2024-12-09 14:44:540456035cb04fa6306a96e0b77e87d2073aec8b776e83ea4100918cc9dbf20c42exe MassLogger
2024-12-08 04:19:05b7bcca505bb4c01e931677cc34085be7c7d1a25bd42e2b1eeb1f8fb24769cce3rtf 
2024-12-04 21:10:07dc8ae41681fdf19abcf62b27b3d8359c32ba6f20bee1e24b7ce9b37d4faebe8brtf 
2024-12-04 16:59:59d8548efc442f16ef983ed49314e80d9262f386960ebb885bab1df100642b76a3rtf 
2024-12-04 13:18:2441b2982fe12fa16b38670cbcfb26d89ebd89572c03687433467556fa6f920adertfRemcosRAT
2024-12-04 12:58:20e761a8dfb02c6fe5213dd0713bf9a5ae9542fb0dc7144b824db993795b55f2f9rtf 
2024-12-04 12:06:11ba506220da7766c2e8fa5637c9046a20e3844ef7e53681242fae6d532c88affdrtfRemcosRAT
2024-11-27 22:34:00c5e7000fb819ce447166e6fed82781d31ab1523d555bd9ee4b3ee11b63e8bc44rtf 
2024-11-19 12:02:1232f5bf26d32b42212ada3e88017ad037c6c84f760a64585252576d893a00ff5frtfVIPKeylogger
2024-11-15 04:53:44bc4f57934371fb9a46fe4ca5166ab1a4e16d523c4a43c28e4a7eded85839166bexe  
2024-11-14 07:15:07d854f347061d9d7b8a9788ab8633c3f07619e29bd440924507a0147484c217c3exe MassLogger
2024-11-14 01:34:11d854f347061d9d7b8a9788ab8633c3f07619e29bd440924507a0147484c217c3exe MassLogger
2024-11-13 18:18:151964409e74e36bbbf384ed0b794965452fd60942e53e5ca3339d763c77c69e18exe MassLogger
2024-11-13 07:33:08117f1bc3d9a04cc8bbc9b0f681745c480f6744ddebd5879e32a05e7c7b3c492fexe MassLogger
2024-11-13 07:33:08303f6cb6bffb7bab41a611f99a776a07fcfda896cb344d3eb4f34461922c60b4rtfVIPKeylogger
2024-11-04 04:40:0866c525114240093bc408138d4c93c51e7c09a235e183fca73ee66ebd150e4fe1exeMassLogger
2024-11-02 04:24:06f5de23b1693c6872f53f4925775cfeac355a619a0813c603929221aa69513b38exeFormbook
2024-11-01 06:08:063b7cfe74a6a990cbe6aefdba86c66a82f6db333fcb30f1ff7ee04e2c7db492f3exeFormbook
2024-11-01 05:18:06058e2c02b8cfb93b480ea8cfac08e967b39631a579256ebee27fb7472194c1eaexeNanoCore
2024-11-01 03:48:06dc9e448e51f4504726d8fdccfce805dfb4c228091f12a194fef40b2a86aa5eb2exeVIPKeylogger
2024-10-30 06:31:0908591ed45402ad065bab1aaf06a05a2d7c9264695b00299f5059ebaf26584a59exeLoki
2024-10-29 13:20:11567820aebb552f95bf4346fd52d4b65fa77fb729a5a3d4d997053dc945d60cefrtfLoki