URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 18.179.111.240 |
|---|---|
| Firstseen: | 2022-03-22 06:18:03 UTC |
| Total malware sites : | 9 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 9 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-03-22 06:18:05 | 18.179.111.240 | ec2-18-179-111-240.ap-northeast-1.compute.amazonaws.com | Not listed | AS16509 AMAZON-02 |  JP | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2023-10-18 09:12:34 | http://18.179.111.240/xr0/loader/uploads/scan08... | Offline | Anonymous | |
| 2022-03-28 23:06:33 | http://18.179.111.240/1b1/loader/uploads/QLT020... | Offline | snake SnakeKeylogger  |  AndreGironda |
| 2022-03-28 07:26:06 | http://18.179.111.240/1b1/loader/uploads/BTL460... | Offline | encrypted SnakeKeylogger |  abuse_ch |
| 2022-03-28 07:26:06 | http://18.179.111.240/1b1/loader/uploads/Doc001... | Offline | encrypted SnakeKeylogger | abuse_ch |
| 2022-03-28 07:25:05 | http://18.179.111.240/1b1/loader/uploads/Docu10... | Offline | exe SnakeKeylogger | abuse_ch |
| 2022-03-28 07:24:06 | http://18.179.111.240/1b1/loader/uploads/Docu10... | Offline | encrypted SnakeKeylogger | abuse_ch |
| 2022-03-28 07:23:06 | http://18.179.111.240/1b1/loader/uploads/Doc103... | Offline | encrypted SnakeKeylogger | abuse_ch |
| 2022-03-22 19:25:05 | http://18.179.111.240/gt1/loader/uploads/Scan07... | Offline | 404KeyLogger snake SnakeKeylogger | AndreGironda |
| 2022-03-22 06:18:05 | http://18.179.111.240/gt1/loader/uploads/NewPO.exe | Offline | 32 exe |  zbetcheckin |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2022-03-28 07:26:06 | e08aa97a1df7b22a014a0d7fec91fb6a9793fdb26dc31cea137aa035a83435cb | unknown | ||
| 2022-03-28 07:26:06 | 5a0521077f56064f4fb05481be76b5b6163d40d37bacbffbba147bcb27e83323 | unknown | ||
| 2022-03-28 07:25:05 | 1c476c0784486ed82583ae459f3ff12b42de483e19116ac879cfafe2d75d8d0c | exe | SnakeKeylogger | |
| 2022-03-28 07:24:06 | 9004aba07c62f4877eec6f2d7c032313796a3115ad34bc2b1b68aa0e60319ddf | unknown | ||
| 2022-03-28 07:23:06 | fdcada3dc88609d180f9fd4b9fcf652203f83603663434d7b7f8eb73d08aa607 | unknown | ||
| 2022-03-22 19:25:05 | f3c2b4e4df5de610791d1d4045ed4e2af0bef69ffa4a9c2141f8f1a1184cccc0 | unknown | ||
| 2022-03-22 06:18:05 | ff7a50836d184677e1c524474e4074c614ddbcab34870de6eab1e33315d7a09d | exe |