0.tcp.eu.ngrok.io
Classification: Suspicious
0.tcp.eu.ngrok.io is a suspicious hostname. Reported by 1 threat source, last seen 2024-02-02. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Online — resolving/reachable. Last checked 2026-07-14 02:42:01.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious URL | Hybrid-Analysis | 2023-08-23 20:00:04 | 2024-02-02 18:45:04 | ||
| Generic.MSIL.PasswordStealerA | Hybrid-Analysis | 2020-06-03 20:45:15 | 2021-08-16 00:00:18 | ||
| Malware | Hybrid-Analysis | 2021-07-29 17:00:33 | 2021-07-29 17:00:33 | ||
| MSIL:Bladabindi | Hybrid-Analysis | 2021-06-17 03:00:17 | 2021-06-17 03:00:17 | ||
| Trojan.Zmutzy.Hory | Hybrid-Analysis | 2021-03-07 19:45:37 | 2021-03-07 19:45:37 | ||
| Backdoor.Fynloski | Hybrid-Analysis | 2020-12-25 08:00:16 | 2020-12-25 08:00:16 | ||
| Trojan.Swrort | Hybrid-Analysis | 2020-04-23 00:15:05 | 2020-04-23 00:15:05 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2020-03-30 08:45:20 | 2020-03-30 08:45:20 | ||
| Generic.MSIL.Bladabindi | Hybrid-Analysis | 2020-01-19 01:31:11 | 2020-01-19 01:31:11 | ||
| Generic.Malware | Hybrid-Analysis | 2019-07-31 23:15:20 | 2019-07-31 23:15:20 |
IP addresses resolved by this hostname
- 18.195.197.45 (2019-07-31 23:15:20)
- 18.184.107.63 (2025-11-09 16:53:40)
- 3.78.28.71 (2026-07-14 02:42:01)
- 52.57.120.10 (2026-07-14 02:42:01)
- 3.74.27.83 (2026-07-14 02:42:01)
- 3.71.225.231 (2026-07-14 02:42:01)
- 18.153.198.123 (2026-07-14 02:42:01)
- 18.192.31.30 (2026-07-14 02:42:01)
Whois information
- Domain
- ngrok.io
- TLD
- io
- First indexed
- 2019-07-31 23:15:20
- Last updated
- 2026-07-14 02:42:02