URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	13.112.210.240
Firstseen:	2021-09-17 18:12:03 UTC
Total malware sites :	20
Online malware sites :	0 (0%)
Offline Malware sites :	20 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-17 18:12:04	13.112.210.240	ec2-13-112-210-240.ap-northeast-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	JP	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-09-22 17:27:05	http://13.112.210.240/nnnnnnnnnnnnnnnnnnnnnnnnn...	Offline	njRAT opendir powershell ps rat	abuse_ch
2021-09-22 17:27:03	http://13.112.210.240/nnnnnnnnnnnnnnnnjbypass.txt	Offline	njRAT opendir powershell ps rat	abuse_ch
2021-09-20 17:48:11	http://13.112.210.240/New%20folder/OServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:06	http://13.112.210.240/New%20folder/Server.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/New%20folder/wzServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/nnnnnnjjjjjjjjbypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/bbbbbbbbbtbypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/nnjjjjjjjjServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/bbbbbtServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/New%20folder/dServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:04	http://13.112.210.240/New%20folder/njServer.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:03	http://13.112.210.240/New%20folder/dbypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:03	http://13.112.210.240/New%20folder/wzbypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:03	http://13.112.210.240/New%20folder/bypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:03	http://13.112.210.240/New%20folder/Obypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-20 17:48:03	http://13.112.210.240/New%20folder/njbypass.txt	Offline	opendir powershell ps rat	abuse_ch
2021-09-19 14:59:04	http://13.112.210.240/njServer.txt	Offline	njRAT powershell ps rat	abuse_ch
2021-09-19 14:59:04	http://13.112.210.240/njbypass.txt	Offline	njRAT powershell ps rat	abuse_ch
2021-09-17 18:12:04	http://13.112.210.240/bypass.txt	Offline	njRAT powershell ps rat	abuse_ch
2021-09-17 18:12:04	http://13.112.210.240/Server.txt	Offline	njRAT powershell ps rat	abuse_ch

The table below shows recent payloads delivery by this host.