URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-12-09 07:06:06	13.212.110.161	ec2-13-212-110-161.ap-southeast-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	SG	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-09 07:06:06	http://13.212.110.161/ale/ale.exe	Offline	AgentTesla exe Formbook opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-17 07:12:02	15e6b5a93f3be05456b092ba5247bdd3c0e5968b1474809263ed4f61b2c180f8	exe		AgentTesla
2021-12-16 13:32:07	6fb0112287fac93ab53bb3e6b9910e6b9e9eb1131647bd249f2819a49b9d01cf	exe		AgentTesla
2021-12-16 09:39:58	1a8828bfca9c4cba055c11248866fd593e686406d977074a08d09e8fbc8d6369	exe		AgentTesla
2021-12-16 08:10:55	ad0d9b3afa924be48034b82b1f3d7d55e47c4831ee6486bc96496209d492515c	exe		AgentTesla
2021-12-15 08:42:39	12a3b36150ee28df4f927c413fd0a7262dc5b9701aecb53428ef801edb3b7bd4	exe		Formbook
2021-12-11 10:43:29	dd241980d65198ef6a52095e8daabbb0dca1dcda503c621ff6bb722b96fe5254	exe		Formbook
2021-12-11 00:51:37	5178bc0a874fb846a5c9288a719b9e37b3ecf2bdddf02318fff042756c5d3dcc	exe		Formbook
2021-12-10 11:51:03	12d25165f4043c9fac5dc9088a4d3451e7ba0cabc3e46f9a21c9063ad1e71c0c	exe		Formbook
2021-12-10 10:11:04	27fc31505dbc8da778775ca436aba118b32f405fc5927251bde8e675f6d86c21	exe		Formbook
2021-12-10 08:30:19	c3658d5869cbdae036a490191e5cf72bc227dc7f8a3413d694573339a19bc55d	exe		Formbook
2021-12-10 06:55:16	8a0d28c7d412d1b45cf59ed1ec014c557e51d20cdf62e3a8eca1dddd152ec9a0	exe		Formbook
2021-12-10 06:16:18	2f955552fc0bb6e5dca5bf39e0a8a679e3871f8f690fc6cad2cdf50fe0b152c8	exe		Formbook
2021-12-10 04:31:17	1c2416570a4c0f3af0612d19b93141c2b78a941bcc7b6789d5d9eb67ada0d9d4	exe		Formbook
2021-12-10 02:32:57	8c6a4adf039e56bbd76bffa6978405f66a8d9a186d7e263affd6afb06774a7f6	exe		Formbook
2021-12-09 21:42:36	b66d6c6e18090a5f05fe4ecf925b670a2d98737e2557ecc57aa269697022f6bf	exe		Formbook
2021-12-09 11:57:43	295645c8141d426a6f510e1461dead195177dd16f3e375d220cbc7bc3d1be98b	exe		Formbook
2021-12-09 10:06:44	a5c14452ee3d997af5f74a53641019faf59b432e61ea27ec2e93869343186ec6	exe		Formbook
2021-12-09 08:34:28	45df8cea19c2e61209635263beed0231686818f1282c164d30b37de675d5ee23	exe		Formbook
2021-12-09 07:30:26	e159309035035691a0390f1c30b4147d4755a5fb4c5a18fbee7d221ce040819d	exe		Formbook
2021-12-09 07:06:05	18a250b294600f42d1883fe122bf7b5e4cf932eabffa5d3a3faf3427cafb2189	exe		Formbook