URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	192.3.193.194
Firstseen:	2023-06-15 07:46:05 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-06-15 07:46:14	192.3.193.194	192-3-193-194-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-06-25 03:40:08	http://192.3.193.194/540/IE_Global.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-06-21 06:35:07	http://192.3.193.194/50/DaHostss.exe	Offline	AgentTesla exe	abuse_ch
2023-06-20 13:51:06	http://192.3.193.194/60/DaHostss.exe	Offline	AgentTesla exe	abuse_ch
2023-06-20 06:33:05	http://192.3.193.194/34/DaHost.exe	Offline	AgentTesla exe opendir	abuse_ch
2023-06-17 11:03:04	http://192.3.193.194/wsa/wsawsawsawsawsawsawsaw...	Offline	AgentTesla RTF	zbetcheckin
2023-06-17 05:29:05	http://192.3.193.194/55/maps.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-06-17 03:55:08	http://192.3.193.194/67/cleanmgr.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-06-17 03:55:07	http://192.3.193.194/44/maps.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-06-17 03:55:07	http://192.3.193.194/68/cleanmgr.exe	Offline	32 AgentTesla exe	zbetcheckin
2023-06-15 07:46:14	http://192.3.193.194/34/cleanmgrse.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-06-25 03:40:08	3cdc44e50c69cb9e0294c17909cfe32a37cb0409afe43705094621024e8a2a76	exe	AgentTesla
2023-06-21 14:23:04	6a3335a8eab740b0ed35794bf86d134611a06d5ee488aa5da37204b347c3f284	exe	AgentTesla
2023-06-21 09:56:58	6a3335a8eab740b0ed35794bf86d134611a06d5ee488aa5da37204b347c3f284	exe	AgentTesla
2023-06-21 06:35:07	3b6936f2021bc0c7e777572f7b3d6d07cade8364d0e0c184b64772ff33093c05	exe	AgentTesla
2023-06-20 23:34:29	3b6936f2021bc0c7e777572f7b3d6d07cade8364d0e0c184b64772ff33093c05	exe	AgentTesla
2023-06-20 20:42:22	e4c100441418455c82b3f63363875ce36ce69f9b50af3daa37389929733391cf	exe	AgentTesla
2023-06-20 13:51:06	5b4088a7d3cf3bf2c69376a6c71caf4931f117ac8078d287ad2aa6ce3108e296	exe	AgentTesla
2023-06-20 06:33:04	b052a8dff8f7cd814a235ebf8db0876c61e20ac035347fa7ab7b090159e20833	exe	AgentTesla
2023-06-17 11:03:04	2580898bcb319660a9ade85c4c70a9b4b2644be647ea4b6829110bde3b33e7f5	rtf	AgentTesla
2023-06-17 05:29:05	e2df18a7595cad59c110be522202de72f4f398b3c72a27fbea3d580aa1b02642	exe	AgentTesla
2023-06-17 03:55:08	0fb2fc1ae6abaa05ced5259a6962c80b6e7bb8dd88e1a737958cd42458ce1b50	exe	AgentTesla
2023-06-17 03:55:07	5750b391f7520164d06daa0762ca20d8ce5ee97c335b06d2966098555069cc68	exe	AgentTesla
2023-06-17 03:55:07	d0c6d22eaf4cb18b6e2325da654db47a6149451ee9e0cdf9a7d569a5c5e1ebae	exe	AgentTesla
2023-06-15 07:46:08	ca63861d243fe426a35ed766b47557c6249f9a8dba8ee1cc737eade5904aa4c4	exe	AgentTesla