URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 18.217.96.49.

Database Entry


Host:18.217.96.49
Spamhaus DBL:Unknown
SURBL:Not listed
Firstseen:2019-02-11 17:20:24 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-02-11 17:20:2618.217.96.49ec2-18-217-96-49.us-east-2.compute.amazonaws.comNot listedAS16509 AMAZON-02 - Amazon.com, Inc.- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-15 22:06:23http://18.217.96.49/Amazon/EN/Messages/2019-02/Offlinedoc emotet epoch1 heodo Clean@Cryptolaemus1
2019-02-13 21:03:38http://18.217.96.49/z54U0nF/Offlineemotet epoch1 exe heodo Clean@Cryptolaemus1
2019-02-11 17:20:26http://18.217.96.49/En/scan/Invoice_number/fbSY-qCQP7_FTp...Offlinedoc emotet epoch2 heodo Clean@Cryptolaemus1