Locky Distribution Site :: sbaky.com
Host Information
| Locky Distribution Site: | sbaky.com | |
|---|---|---|
| Threat: | Distribution Site | |
| Malware: | Locky | |
| Host Status: | ||
| Blacklist check: | Spamhaus DBL: | |
| SURBL: | ||
| Domain Registar: | GODADDY.COM, LLC | |
| Nameserver(s): | jm1.dns.com | |
| jm2.dns.com | ||
| Firstseen (UTC): | 2016-09-15 09:53:26 | |
| Lastseen (UTC): | never | |
Ransomware URLs
The table below shows all associated Ransomware URLs located on this host.
| Firstseen (UTC) | URL (?URL assocaited with this Ransomware. The leading dots (Red, Green, Grey) indicate whether the URL is active or not. Red = Online Green = Offline Grey = Unknown) | Threat | Malware |
|---|---|---|---|
| 2016-11-30 13:19:21 | http://sbaky.com/873nf3g | ||
| 2016-09-15 09:53:26 | http://sbaky.com/rpveuev |
# of URLs: 2
Associated IP addresses
The table below shows all ip addresses (e.g. A records) associated with this Locky Distribution Site. In case the host is a domain name, the table also shows a history of previous A records if there are any.
| Active (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address). yes = Active A record no = Historical record) | Firstseen (UTC) | Lastseen (UTC) | IP address | Hostname | SBL | AS number | AS name | Country |
|---|---|---|---|---|---|---|---|---|
| yes | 2019-11-20 01:39:45 | 2019-12-05 03:52:37 | 45.42.86.108 | Not listed | AS26658 | HENGTONG-IDC-LLC - HT, US |  United States (US) | |
| no | 2017-01-14 04:27:24 | 2018-08-13 03:56:03 | 50.63.202.38 | ip-50-63-202-38.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-16 01:14:33 | 2018-08-28 01:52:15 | 50.63.202.48 | ip-50-63-202-48.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-06-26 01:44:56 | 2018-08-20 03:53:51 | 50.63.202.47 | ip-50-63-202-47.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-20 04:19:16 | 2017-02-09 04:27:31 | 50.63.202.46 | ip-50-63-202-46.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-12-31 01:25:39 | 2018-07-27 03:56:18 | 50.63.202.45 | ip-50-63-202-45.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-15 04:13:40 | 2018-11-13 01:52:27 | 50.63.202.44 | ip-50-63-202-44.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-12 04:22:48 | 2018-12-24 01:49:56 | 50.63.202.43 | ip-50-63-202-43.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-28 01:39:16 | 2018-10-06 01:51:55 | 50.63.202.42 | ip-50-63-202-42.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-02-17 01:10:27 | 2018-10-09 03:52:37 | 50.63.202.41 | ip-50-63-202-41.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-01 01:46:15 | 2018-10-26 01:49:49 | 50.63.202.40 | ip-50-63-202-40.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-05-14 01:26:34 | 2018-11-03 01:47:46 | 50.63.202.39 | ip-50-63-202-39.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-10 12:26:20 | 2018-01-24 01:12:00 | 50.63.202.49 | ip-50-63-202-49.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-07-29 01:39:07 | 2018-08-10 03:56:53 | 50.63.202.37 | ip-50-63-202-37.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-01-30 01:30:44 | 2018-12-19 01:53:15 | 50.63.202.36 | ip-50-63-202-36.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-03-28 01:13:02 | 2018-09-30 03:55:01 | 50.63.202.35 | ip-50-63-202-35.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-04-12 01:57:31 | 2018-09-24 01:49:41 | 50.63.202.34 | ip-50-63-202-34.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-02-14 16:35:03 | 2018-10-04 01:49:46 | 50.63.202.33 | ip-50-63-202-33.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-13 04:22:47 | 2018-12-01 03:53:08 | 50.63.202.32 | ip-50-63-202-32.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-01-18 01:46:42 | 2019-01-30 01:43:37 | 184.168.221.91 | ip-184-168-221-91.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-12-26 01:49:47 | 2019-01-08 03:50:48 | 184.168.221.89 | ip-184-168-221-89.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2018-12-27 01:48:20 | 2019-01-04 03:51:52 | 184.168.221.87 | ip-184-168-221-87.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2017-01-31 04:14:09 | 2018-06-11 01:26:07 | 50.63.202.59 | ip-50-63-202-59.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-01-10 03:50:35 | 2019-01-11 01:47:49 | 50.63.202.95 | ip-50-63-202-95.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
| no | 2019-01-20 01:46:18 | never | 50.63.202.78 | ip-50-63-202-78.ip.secureserver.net | Not listed | AS26496 | AS-26496-GO-DADDY-COM-LLC - GoDaddy.com,[...] | United States (US) |
# IPs found: 25 (max. 25)
Dropped files
Latest 100 files (malware samples) dropped by this distribution site.
| Firstseen (UTC) | MD5 hash | Filesize | VT | Signature |
|---|---|---|---|---|
| 2016-11-30 19:07:32 | 3b17868521aa428bb512edddbc285aaf | 196'608 bytes |  12/55 (21.82%)
| n/a |
| 2016-09-15 09:44:31 | 131cb13a1d5d26d5aa4dfec6b0202cdb | 163'840 bytes | 17/59 (28.81%)
| # Not authorized |
Unique dropped files: 2