URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 94.228.166.74 |
|---|---|
| Firstseen: | 2024-06-23 10:29:05 UTC |
| Total malware sites : | 8 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 8 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2024-06-23 10:29:05 | 94.228.166.74 | Not listed | AS214697 KOMTEL |  RU | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-07-03 00:58:05 | http://94.228.166.74/wp-includes/poop.exe | Offline |  Bitsight | |
| 2024-07-02 16:02:08 | http://94.228.166.74/wp-includes/rig.exe | Offline | CoinMiner | Bitsight |
| 2024-06-27 09:25:10 | http://94.228.166.74/wp-includes/ldr.exe | Offline | 32 Amadey exe |  zbetcheckin |
| 2024-06-25 05:13:07 | http://94.228.166.74/wp-includes/stl.exe | Offline | 32 exe RedLineStealer  | zbetcheckin |
| 2024-06-24 05:17:05 | http://94.228.166.74/online/dl/TgFr.exe | Offline | 32 exe RedLineStealer | zbetcheckin |
| 2024-06-24 03:44:06 | http://94.228.166.74/online/dl/uYtF.exe | Offline | 64 CoinMiner exe | zbetcheckin |
| 2024-06-23 10:29:07 | http://94.228.166.74/online/dl/0x3fg.exe | Offline | Amadey exe |  abus3reports |
| 2024-06-23 10:29:05 | http://94.228.166.74/online/dl/utyj.exe | Offline | exe | abus3reports |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2024-07-03 00:58:05 | a294620543334a721a2ae8eaaf9680a0786f4b9a216d75b55cfd28f39e9430ea | exe | ||
| 2024-07-02 16:02:08 | 63733ff3b794ebd7566103c8a37f7de862348ffacf130661f2c544dea8cde904 | exe | CoinMiner | |
| 2024-06-27 09:25:10 | b1d5b1e480a5731caacc65609eaf069622f1129965819079aa09bc9d96dadde5 | exe | Amadey | |
| 2024-06-25 13:26:49 | 31dd0e69fb3a0a0999aa228d766e36033bbf1e482bdb93912705850badfba7b0 | exe | RedLineStealer | |
| 2024-06-25 05:13:07 | d04e33979f01e846bf153c8d907f0aa842710f7adb6b7c3c7962673ab2152045 | exe | RedLineStealer | |
| 2024-06-24 05:17:05 | d04e33979f01e846bf153c8d907f0aa842710f7adb6b7c3c7962673ab2152045 | exe | RedLineStealer | |
| 2024-06-24 03:44:06 | 63733ff3b794ebd7566103c8a37f7de862348ffacf130661f2c544dea8cde904 | exe | CoinMiner | |
| 2024-06-23 10:29:07 | b1d5b1e480a5731caacc65609eaf069622f1129965819079aa09bc9d96dadde5 | exe | Amadey |