URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 185.215.113.89
Firstseen:2022-04-15 07:13:02 UTC
Total malware sites :8
Online malware sites :0 (0%)
Offline Malware sites :8 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-05-28 15:27:05http://185.215.113.89/dl/0528/mars2_Hvvpvuns.bmpOfflineencrypted abuse_ch
2022-05-28 15:27:04http://185.215.113.89/dl/0528/net_Akqwbsob.pngOfflineencrypted abuse_ch
2022-05-28 15:25:04http://185.215.113.89/pm.exeOfflineCoinMiner.XMRig exe abuse_ch
2022-05-28 15:25:04http://185.215.113.89/rc.exeOfflineexe RemcosRAT ext abuse_ch
2022-05-28 15:25:03http://185.215.113.89/azne.exeOfflineAZORult ext exe abuse_ch
2022-05-28 15:18:04http://185.215.113.89/dl/0528/az_Tsrqixjf.bmpOfflineAZORult ext encrypted abuse_ch
2022-05-28 15:17:05http://185.215.113.89/cc.exeOfflineexe abuse_ch
2022-04-15 07:13:04http://185.215.113.89/dl/0414/net_Gzhsuovx.bmpOfflineencrypted abuse_ch