URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 173.232.204.89
Firstseen:2021-11-23 09:01:02 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-12-29 12:44:05http://173.232.204.89/mb.exeOfflineAgentTesla ext exe abuse_ch
2021-12-22 11:30:17http://173.232.204.89/do.exeOfflineAgentTesla ext exe abuse_ch
2021-12-21 17:05:05http://173.232.204.89/az.exeOfflineAgentTesla ext exe abuse_ch
2021-12-21 13:58:11http://173.232.204.89/vg.exeOfflineAgentTesla ext exe abuse_ch
2021-12-21 09:19:04http://173.232.204.89/TWA.exeOfflineAgentTesla ext exe abuse_ch
2021-12-13 19:13:06http://173.232.204.89/PP.exeOfflineAgentTesla ext exe abuse_ch
2021-12-11 06:52:05http://173.232.204.89/TYJ.exeOfflineAgentTesla ext exe abuse_ch
2021-12-09 14:57:05http://173.232.204.89/rkw.exeOffline32 AgentTesla ext exe zbetcheckin
2021-12-09 14:57:05http://173.232.204.89/ik_c.exeOffline32 AgentTesla ext exe zbetcheckin
2021-12-09 14:45:05http://173.232.204.89/bnikg.exeOffline32 exe Formbook ext zbetcheckin
2021-12-09 13:41:06http://173.232.204.89/ikik.exeOfflineAgentTesla ext exe abuse_ch
2021-12-09 13:41:05http://173.232.204.89/9c_IK.exeOfflineAgentTesla ext exe abuse_ch
2021-12-09 13:41:05http://173.232.204.89/trk.exeOfflineAgentTesla ext exe abuse_ch
2021-11-27 23:42:05http://173.232.204.89/bb.exeOffline32 AgentTesla ext exe zbetcheckin
2021-11-27 21:33:04http://173.232.204.89/b2.exeOffline32 AgentTesla ext exe zbetcheckin
2021-11-25 21:31:05http://173.232.204.89/taskengs.exeOffline32 AgentTesla ext exe zbetcheckin
2021-11-25 21:22:04http://173.232.204.89/GA.exeOffline32 AgentTesla ext exe zbetcheckin
2021-11-25 18:13:04http://173.232.204.89/taskmg.exeOfflineAgentTesla ext exe abuse_ch
2021-11-25 18:12:05http://173.232.204.89/task.exeOfflineAgentTesla ext exe abuse_ch
2021-11-23 11:05:06http://173.232.204.89/ik1.exeOffline32 exe zbetcheckin
2021-11-23 09:01:06http://173.232.204.89/ikg.exeOfflineAgentTesla ext exe opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-12-29 12:44:05c3d7e456737132d66363280933814835bc8b82c6f57a6ead7b0eb4f99ec199d6exeAgentTesla
2021-12-22 11:30:172f011b56a42ab0b5387ee115141b949016aeb6e9c194e091684f32e175525ca0exeAgentTesla
2021-12-21 17:05:05013aafd600f812caa9d5436d268f7dc64ca849d31442b0297044e40e3016ea2cexeAgentTesla
2021-12-21 13:58:1174c6f6ac8ffa4d4468f0a72c425ab26d16582607939c9007a50688671ce90796exeAgentTesla
2021-12-21 09:19:04fc0c099264fa708c8a0eb78cdeefa962bcec1499f7d462242b195856dc1917f7exeAgentTesla
2021-12-13 19:13:06eeb80b6382a393344052a851dc26181aa728c18d09a4565f14829f5c23f852c4exeAgentTesla
2021-12-11 06:52:0501b83c0540c9dd52fff5093e4f455447b5b238cc74ef12e231c0824f1845cb37exeAgentTesla
2021-12-09 14:57:053b8103d9e6d6cb728edd9b55c9b9f2ca51099bc107c197b6c4dca1956743a1b7exeAgentTesla
2021-12-09 14:57:05d9e47df5fcc2f52479d4c6ecfa745d0a299c197d5e4f81186bcd67d816db356dexeAgentTesla
2021-12-09 14:45:0567784b75c77762be449b4a271f9afa04520817197749c84a82ca8d1942867163exeFormbook
2021-12-09 13:41:061e55fa6d522797aa62f012c3015e78a4cc6a27a2d76c6dbd41ad975d3e43b78aexeAgentTesla
2021-12-09 13:41:05a09c6af12b3f55605f7673e4fce99891d181a4a6616b5502f17eb300238e2186exeAgentTesla
2021-12-09 13:41:05b4d9f1c7f9c27fcff496f443ecc5e1c3c1547a7394b73c974417b380e0a86cffexeAgentTesla
2021-11-27 23:42:05d30fdcf3c1e63aa03fad165cf11e1006bcc6c52330592fa11cd8d8a1eedc3646exeAgentTesla
2021-11-27 21:33:0481b11c3463db6618788ee5883b39ca7bbadfad39bbbd5a02e0eb1e94d7e80130exeAgentTesla
2021-11-25 21:31:05181fd0e13ef3375db8e9cebef4f451b51195f723e8767204564ed9acce77d275exeAgentTesla
2021-11-25 21:22:04a0ad6da904e9df35d720ac9be7aed2ce5bada95b0c956a6f17cac30394ff28a3exeAgentTesla
2021-11-25 18:13:0456960095ea2eda1c680f9df0937a792e9bca7af4922931540688097e6d2a43bbexeAgentTesla
2021-11-25 18:12:05a031918e001745c0f07d5d0ac118a0bfeb946236033e20fa1b16e0d54ee7bcb8exeAgentTesla
2021-11-23 11:05:06939bb62532eaf35f5b09205302075606f998f100fe3a5aceeaf307c24388f4c5exe 
2021-11-23 09:01:059545884161c976f0946b73026d1c80a1c0b8fa19910cbd18b33752a0889ec5baexeAgentTesla