URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 101.133.225.51
Firstseen:2025-06-26 18:11:04 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-26 18:11:35 101.133.225.51Not listedAS37963 ALIBABA-CN-NET- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-26 18:11:35http://101.133.225.51/02.08.2022.exeOnlinecensys CobaltStrike ext DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-16 13:21:31a45c19ccd122009f9f0cddf15f8a50d5dcc6687f5eeb81ac6b6332d4dcc163ebunknown  
2026-02-25 07:09:40715a1bdbc9997618b96f2c40ebba2027c0c4c59c2d1356470f0611f71c9aa304unknown  
2026-01-13 13:15:4541c89b4b0b3976dd6f7f08f084387d11323b3fb927f08f70441d90e40457d799unknown  
2026-01-13 08:49:3055d2a96566fa286ae6e17899d95dcfc8feac39b0fc4c0a285e35baacfc465e71unknown  
2025-06-27 03:59:47f27eafd90ac1fb1d391b4b2c431123c8944da5d44837ce9a994584e902aa536eunknown