URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 18.159.62.193 |
|---|---|
| Firstseen: | 2021-11-13 20:17:02 UTC |
| Total malware sites : | 5 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 5 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-11-13 20:17:03 | 18.159.62.193 | ec2-18-159-62-193.eu-central-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-11-13 22:06:04 | http://18.159.62.193/jv/t8/etl_00382_0541_01654... | Offline | 32 exe Formbook  |  zbetcheckin |
| 2021-11-13 22:02:03 | http://18.159.62.193/jv/t8/ISO_003820_03152IMG.exe | Offline | 32 exe SnakeKeylogger | zbetcheckin |
| 2021-11-13 21:58:04 | http://18.159.62.193/jv/t8/Request_000517_03107... | Offline | 32 exe SnakeKeylogger | zbetcheckin |
| 2021-11-13 21:58:04 | http://18.159.62.193/jv/t8/Request_000517_03107... | Offline | 32 exe SnakeKeylogger | zbetcheckin |
| 2021-11-13 20:17:03 | http://18.159.62.193/jv/t8/shrrico.exe | Offline | AsyncRAT exe |  abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-11-13 22:06:03 | e7cabf681ce8989913c4c78c8f539a791c852e0e637f359d2a399b91dc676506 | exe | Formbook | |
| 2021-11-13 22:02:03 | 609924bb2e3350f494553b8a7e91916766dae319d2b17550c8d97b403fc00794 | exe | SnakeKeylogger | |
| 2021-11-13 21:58:04 | 17189dac59b8bb01a4d2785d978d9007c8c0f0768aca013ef9abfef0c14fe7ca | exe | SnakeKeylogger | |
| 2021-11-13 21:58:04 | 6fe626105e92733a8c3119e1636c72daa63ffa0fde2407c654c2f9ffe3f77ae7 | exe | SnakeKeylogger | |
| 2021-11-13 20:17:03 | 86fe486e3f2591d8c631a2d25ccdc147a1e003eb5c39c11bf33b9e44d570102c | exe | AsyncRAT |