URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-06-16 11:32:07	192.3.31.219	192-3-31-219-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-22 10:46:04	http://192.3.31.219/HUUOKZQqrITTJgH.exe	Offline	AgentTesla exe	abuse_ch
2020-07-11 06:15:05	http://192.3.31.219/7CzjGIK5znX0kpa.exe	Offline	AgentTesla exe	abuse_ch
2020-07-07 22:47:03	http://192.3.31.219/N2eb0gwwGmBPFwo.exe	Offline	AgentTesla exe	p5yb34m
2020-07-07 12:05:07	http://192.3.31.219/3eJYx791KGJwBky.exe	Offline	AgentTesla CVE-2017-11882 Loader macros	theDark3d
2020-07-03 08:32:09	http://192.3.31.219/gOpcUQYbMyq5tML.exe	Offline	AgentTesla exe	abuse_ch
2020-07-02 08:27:03	http://192.3.31.219/nsEEXqvKIwwJoah.exe	Offline	AgentTesla exe	abuse_ch
2020-06-16 11:32:07	http://192.3.31.219/Ntb4FTHpkIj6YG6.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-22 10:46:04	a4ebe2e53ca2a48c4d01c7685cece4ce62b810246213c28f0794d7af0820b330	exe		AgentTesla
2020-07-11 06:15:05	caf1d4f374de0479bc4ca6caa289cfc35720779080a2957aab92ba4fc1602e6c	exe		AgentTesla
2020-07-07 22:47:03	d7c3ac66b3977de751a25e482bffb7eabaee20c623c529f479e07ac6234142d6	exe		AgentTesla
2020-07-07 12:05:07	5cf10faa1d3568be564f096b940d45f2016b5f27289c72e03defe2dabc7e4670	exe		AgentTesla
2020-07-03 08:32:09	3a485b15429ea9e1d54323b99052639043dcd201ad854a4aa926cc923412483b	exe		AgentTesla
2020-07-02 08:27:03	2699d730f222179c1d8d1fac889acf4a7bccffe197d58d1426a7f3431ba2194e	exe		AgentTesla
2020-06-16 11:32:05	fdbe165b5392fa2be547b8a42d0ce0098db20c0265f457329811e3d1bd766529	exe		AgentTesla