URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-28 17:37:52	185.137.235.2		Not listed	AS49505 SELECTEL	RU	yes
2020-08-13 14:18:13	37.140.192.23	server115.hosting.reg.ru	Not listed	AS197695 AS-REGRU	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-13 14:18:13	http://accent-granit.com/urjikh/555555.png	Offline	exe Qakbot qbot Quakbot spx154	lazyactivist192

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-08-14 05:38:17	45ca9f47b59b4acd03eeabc7fd1ccb0815d6ba7e6fd78c16bf0c036243342f21	exe
2020-08-14 05:23:02	7c13b701d53bdf02d7257a7b43d70f57913a0a59dd4512cc4842f40f206bcbb6	exe
2020-08-14 05:03:50	5f700db22ffd6ebbf0d543421eb787e201f1e32501135bd7ad9a72961e800d73	exe
2020-08-14 04:37:25	8afd69b4e7f355a940c6394c226cf2d85c10b57d338541ad8ee2523140551ef4	exe
2020-08-14 04:15:00	f08fdbd9f99d02f1a6d88b1f5255159f08ecdb7cbd8fa5f9d25651678d586db4	exe
2020-08-14 02:44:36	749962d8cbea76208d527fda0e383378adbff4b2919c1ea3e1960bf578aa8a53	exe
2020-08-14 02:28:40	012f1fe0012657fd4a06bcbe31e7e3faadccf92dbe8c09c131a5849c8e99b29d	exe
2020-08-14 00:56:29	8bad91dbdf090eba1ba2f8c0a108963522bad0d391597cb158c02b0136e02ab6	exe
2020-08-14 00:50:24	19fe4c91169c0a167ad65b6a56ae90326bced88301ec112ad2e42e0288d5ce4d	exe
2020-08-14 00:36:29	0faa8727e1c1f1840b2149dc6f7ee68aa40be8ea7d37cea1d6ba287c693d2c8e	exe
2020-08-14 00:18:58	3497b6e7b4585e804694091305cd5944ce8d4802a8a0df91906008fb70e339d8	exe
2020-08-13 23:50:02	8d2daf6f45aac93c3c385071925451c6417ba26725d74b2bea22a6e693a9d588	exe
2020-08-13 22:23:59	e959ee4d24e9790c22a2d5bf413b670e936d09368e90f0d5281048ef3735631a	exe
2020-08-13 22:05:14	c7dbf52a61e75e2b296605a8e6dfb889f8e3b839cc8c50615285ac5926d17032	exe
2020-08-13 21:40:54	d92fc9e832f462570711891fd4da7b1f5c66f80a1bf3cd0d2add8e6b31a8267f	exe
2020-08-13 21:23:41	cc61fed6c1910078edefd5530680292b4dd0b29efb616dfb07bb599d62cc52aa	exe
2020-08-13 20:59:29	8ca6b448fb301d16b6b4a15658be71603db641b867783985e9463b1a5dcf6cf5	exe
2020-08-13 20:35:23	2bd98d8d36368652bf4cb414eadbbf306020bbbf0ff63dc76e376aeed7698cf3	exe
2020-08-13 20:14:04	9adf80a77a23202892d0f9d4435d54e650a83a15dc5f2927d594faf22cc5a54c	exe
2020-08-13 19:35:55	8e78c15d430259437a466a6cd3e4a668644a26d5ee2f688df88a394f1dcb47bf	exe
2020-08-13 19:20:48	d5393a33631360e7b8faf6cbd59acf09076e4b7c5784d67b52102debe0464e88	exe
2020-08-13 18:55:48	b0fc5d392ddd3436498ef4cd1f62f8a140abc29df7b44fad0b794baafc57125b	exe
2020-08-13 18:13:57	710256691825419f0a28ab64fb1a8741282ec52ccfad57b5645a6356f0b3cb09	exe
2020-08-13 17:51:14	69981fa392cc81592395ed108667c73086678351f687b59ae3ec935463cafae4	exe
2020-08-13 17:50:22	7f0f9a0565cea6ec073e297c65c0b884b60a7c47163918fe4fde34efa37aa2d4	exe
2020-08-13 17:23:13	b49ce40a34420c5334416f1134ff947cea829014cc16f9cd42b21825b36b16a8	exe
2020-08-13 16:50:55	a1f9f563701f5952ff1e8b4c512a81b767c712ab719315e5b6b4b358b87f6eb7	exe
2020-08-13 16:33:31	7d901541f24e505c35a45e7f2dac0be9d7e8ac841afb913139f20ca27ebcfc20	exe
2020-08-13 16:15:07	46454ab628f2c3690913caf1c17b40f3e27f1864ec4dd94fbb56e3cd4fc9e2f5	exe
2020-08-13 15:59:20	69fe4ffcd77502e9fe7409964aef1b012d69fd5e0bfc211dfb18c9cc6f27180a	exe		Quakbot
2020-08-13 15:31:04	5adf9f44f1cb856815ff9b7f0ae399e8256d34e55bf7d5431ee3d19839a470bf	exe
2020-08-13 15:09:39	7ef53828851a0443f79b6c339d7909802940571a3fe8a945075ac101e5d2bbd0	exe
2020-08-13 14:45:53	fd04287bc14e076203da55cd83a2ae2af5f827a9366d9e6be63d32a0a9cbde99	exe
2020-08-13 14:18:12	b129759172fdbc90c29af553629dc4be4ef1246df3872dce5aeefdf943dac179	exe		Quakbot