URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | bbir.info |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Not blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2020-10-20 18:40:04 UTC |
| Total malware sites : | 1 |
| A record(s) observed : | 8 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 09:16:09 | 15.197.148.33 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2025-04-27 09:16:09 | 216.239.32.21 | any-in-2015.1e100.net | Not listed | AS15169 GOOGLE | US | yes |
| 2025-04-27 09:16:09 | 216.239.34.21 | any-in-2215.1e100.net | Not listed | AS15169 GOOGLE | US | yes |
| 2025-04-27 09:16:09 | 216.239.36.21 | any-in-2415.1e100.net | Not listed | AS15169 GOOGLE | US | yes |
| 2025-04-27 09:16:09 | 216.239.38.21 | any-in-2615.1e100.net | Not listed | AS15169 GOOGLE | US | yes |
| 2025-04-27 09:16:09 | 3.33.130.190 | a2aa9ff50de748dbe.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 | US | yes |
| 2020-10-20 18:40:05 | 69.65.10.231 | gn409.whpservers.com | Not listed | AS32181 ASN-GIGENET | US | no |
| 2021-03-01 20:48:26 | 34.98.99.30 | 30.99.98.34.bc.googleusercontent.com | Not listed | AS396982 GOOGLE-CLOUD-PLATFORM | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-10-20 18:40:05 | http://bbir.info/cgi-bin/ckhwpn05p2/7yyqk2qg7io... | Offline | doc emotet  epoch2 heodo |  Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-10-20 21:15:09 | 8cadf5fc31643a1acc9b991d110e039e7e0520e94783c61d9caf5ccb2481915e | doc | Heodo | |
| 2020-10-20 20:35:00 | e6ed92a2be8cac09be62e066409f461a6591959a0d772b5dc6fe04c356949852 | doc | Heodo | |
| 2020-10-20 20:16:11 | 07bdea9c73c53c4d65c9cf2061b9a303e8f05180736729fe54c17c6953e66184 | doc | Heodo | |
| 2020-10-20 19:50:24 | 73b1ecd0729d4a6776f63d5ec7943f5914ff080311e5f670ab38a4991795d29d | doc | Heodo | |
| 2020-10-20 19:29:55 | ab211d004eaaa6ba8bbff9513b8260b7f7e03bec07bd245280926817fd1c31be | doc | Heodo | |
| 2020-10-20 19:16:00 | 1ba5dbed9742b67df98a121da39e1a287f4cf594b13fa3770f068cf2b15e914b | doc | Heodo | |
| 2020-10-20 19:03:38 | 2e98bef98194397d9ed6991c80f5625893a60603057c532ce9f24cec16a58f9d | doc | Heodo | |
| 2020-10-20 18:40:05 | 7e87d583c9b01d876e1c3b8228fcec62d0a5cc2713bd732f006b9bbd948080fb | doc | Heodo |