URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 104.245.146.219 |
|---|---|
| Firstseen: | 2021-07-14 14:29:02 UTC |
| Total malware sites : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-07-14 14:29:06 | 104.245.146.219 | Not listed | AS32489 AMANAHA-NEW |  CA | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-07-14 14:29:06 | http://104.245.146.219/images/maxsungether.png | Offline | dll rob107 Trickbot  |  abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-07-14 15:04:46 | 970fe530e3eaa88b4ae4e9cfff4d911874ab45c7e8026522d89a8f97632a5726 | dll | TrickBot | |
| 2021-07-14 14:54:52 | 3f29afe65c284d5041944f4ca77c11d1006fdf86990a39f846d3636289f52dbc | dll | TrickBot | |
| 2021-07-14 14:46:29 | 3ac679301094e92830495bd6c244a1f27b0d4f8adb6d851f7c875d0d69afc017 | dll | TrickBot | |
| 2021-07-14 14:29:05 | 1998f7ee2ad5b44e6700f68a42ca9b7f167c53dab36dd78bd79fa0ee3b2eb842 | dll | TrickBot |