URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 13.61.196.219
Firstseen:2025-06-13 01:32:03 UTC
Total malware sites :9
Online malware sites :0 (0%)
Offline Malware sites :9 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-13 01:32:05 13.61.196.219ec2-13-61-196-219.eu-north-1.compute.amazonaws.comNot listedAS16509 AMAZON-02- SEyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-13 10:42:04http://13.61.196.219:8080/upload.phpOffline abuse_ch
2025-06-13 01:33:04http://13.61.196.219:8080/exedownload.vbsOfflineopendir Riordz
2025-06-13 01:32:14http://13.61.196.219:8080/binder.exeOfflineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/get_file.ps1Offlineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/power.ps1Offlineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/power.vbsOfflineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/screenshot.ps1Offlineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/browsers_pass_get.ps1Offlineopendir Riordz
2025-06-13 01:32:05http://13.61.196.219:8080/run_screenshot.vbsOfflineopendir Riordz