URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 18.217.96.49.

Database Entry


Host: 18.217.96.49
Firstseen:2019-02-11 17:20:24 UTC

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-02-11 17:20:26 18.217.96.49ec2-18-217-96-49.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02 - Amazon.com, Inc.- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-15 22:06:23http://18.217.96.49/Amazon/EN/Messages/2019-02/Offlinedoc emotet ext epoch1 heodo ext Clean@Cryptolaemus1
2019-02-13 21:03:38http://18.217.96.49/z54U0nF/Offlineemotet ext epoch1 exe heodo ext Clean@Cryptolaemus1
2019-02-11 17:20:26http://18.217.96.49/En/scan/Invoice_number/fbSY-qCQP7_FTp...Offlinedoc emotet ext epoch2 heodo ext Clean@Cryptolaemus1