URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	185.234.218.145
Firstseen:	2020-05-08 09:15:02 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-05-08 09:15:04	185.234.218.145		Not listed	AS60144 THREE-W-INFRA-AS	NL	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-05-08 12:58:15	http://185.234.218.145/sfhIXiYdedsCqCf.exe	Offline	AgentTesla exe	abuse_ch
2020-05-08 10:44:08	http://185.234.218.145/tb0p4Jv21byugHo.exe	Offline	AgentTesla exe	zbetcheckin
2020-05-08 10:41:13	http://185.234.218.145/1C99Q0lSLdhcarc.exe	Offline	AgentTesla exe	zbetcheckin
2020-05-08 10:37:07	http://185.234.218.145/vUtoBWJnFWAfNeN.exe	Offline	AgentTesla exe	zbetcheckin
2020-05-08 09:15:04	http://185.234.218.145/GCTGI5Y1ydak3Oz.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-05-08 12:58:15	a5ff8e007fbe3057f592721fcc17dd89e35821085ebc0ac5093240faef1c4279	exe	AgentTesla
2020-05-08 10:44:08	284e183074af6e060ae9a9197753ddc544f77b11c85a7adcadcfd11b0dfa28d4	exe	AgentTesla
2020-05-08 10:41:13	7d4be744fd277187c3db0ede90502e348e765014d648a83595ee72e3cbb08f9a	exe	AgentTesla
2020-05-08 10:37:07	b6a102f8c6a87525e4bc1779286142615911587e20c209c9b693012a06914682	exe	AgentTesla
2020-05-08 09:15:03	de8a9c997e7cf597b025fe8e6a96aeb513370b060a830402a00e3f7d8823922f	exe	AgentTesla