URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	192.3.223.30
Firstseen:	2023-03-13 09:38:03 UTC
Total malware sites :	14
Online malware sites :	0 (0%)
Offline Malware sites :	14 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-03-13 09:38:10	192.3.223.30	192-3-223-30-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-02-24 07:44:02	http://192.3.223.30/4232/WERFG.txt	Offline		JAMESWT_MHT
2024-10-09 23:32:05	http://192.3.223.30/5456/beautifulpictureforcat...	Offline		DaveLikesMalwre
2024-10-09 23:32:05	http://192.3.223.30/5456/em/IEnetworkscoockie.hta	Offline		DaveLikesMalwre
2024-10-09 23:32:05	http://192.3.223.30/5456/ERFGD.txt	Offline		DaveLikesMalwre
2024-09-21 16:50:15	http://192.3.223.30/200/er/weneednicepicturewit...	Offline		abus3reports
2024-09-21 16:50:15	http://192.3.223.30/200/LODCE.txt	Offline	rev-base64-loader Smoke Loader	abus3reports
2024-09-21 16:50:08	http://192.3.223.30/200/seebestpicturewithnewth...	Offline		abus3reports
2023-04-04 13:35:07	http://192.3.223.30/blessed.exe	Offline	AgentTesla exe	abuse_ch
2023-03-28 17:32:05	http://192.3.223.30/GIB.exe	Offline	AgentTesla exe	abuse_ch
2023-03-20 11:06:06	http://192.3.223.30/man.exe	Offline	AgentTesla exe	abuse_ch
2023-03-17 16:55:11	http://192.3.223.30/eazy.exe	Offline	AgentTesla exe	abuse_ch
2023-03-16 16:35:12	http://192.3.223.30/soft.exe	Offline	AgentTesla exe	abuse_ch
2023-03-13 09:38:10	http://192.3.223.30/chima.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2024-09-21 16:50:15	70698e62c2170d003b444ecf0c5f6af81f98e26a56198e118930566be818fe52	txt	Smoke Loader
2024-09-21 16:50:14	1919fe1200745be744006f6644e4b65f27992bc8d28c0f444f1da5162503f708	rtf
2023-04-04 13:35:07	6b11d54ca710c7b649b2c137e2eff0bc114bf7b809f40a771d1acd5aa5dce463	exe	AgentTesla
2023-03-28 17:32:05	43d66102096b171d791582ce4ad7881c68946594a91fa9c4931e9fae6b70e806	exe	AgentTesla
2023-03-20 11:06:06	de673c6577604d1036c5df6d67d9f5f9010eeb367a43ec7712b5614f70b725cd	exe	AgentTesla
2023-03-17 16:55:11	b7d8fbbf428d72bcf7513bf41bfbf43db9f8f90a86f790b35e439dc1c1ac58e0	exe	AgentTesla
2023-03-16 16:35:12	9f7bc16e3e1f2dd542f8de4d732c19b89e54a7e0924b36274f087aa329359767	exe	AgentTesla
2023-03-13 09:38:04	720f94268169c0be484b977e717ef167ceaace51c27e8f6ccba35f4985cb4bc6	exe	AgentTesla