URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-06-16 12:49:06	192.3.31.220	192-3-31-220-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-13 14:27:03	http://192.3.31.220/46H3mT16hDd9iAu.exe	Offline	AgentTesla exe	abuse_ch
2020-07-10 11:45:07	http://192.3.31.220/Advfgmw.exe	Offline	avemaria AveMariaRAT	Anonymous
2020-07-09 11:48:06	http://192.3.31.220/TZ9Z4hXCe51Vx1v.exe	Offline	AgentTesla exe	abuse_ch
2020-07-07 22:48:08	http://192.3.31.220/v4wi53xvbbBNoUD.exe	Offline	AgentTesla exe	p5yb34m
2020-07-04 05:46:03	http://192.3.31.220/646rEJfSIwVXtF3.exe	Offline	AgentTesla exe rat	p5yb34m
2020-06-26 08:05:04	http://192.3.31.220/heJAzvK0GscghfR.exe	Offline	AgentTesla exe	abuse_ch
2020-06-17 12:48:05	http://192.3.31.220/0TJ8KQssmtSIg7u.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-17 02:37:38	http://192.3.31.220/pVqOWvO2LP5aXom.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-17 02:35:00	http://192.3.31.220/YftM1Hup9wKCRpZ.exe	Offline	AgentTesla exe	zbetcheckin
2020-06-16 13:45:07	http://192.3.31.220/g5QVeknFicdnHR7.exe	Offline	AgentTesla exe	abuse_ch
2020-06-16 12:49:06	http://192.3.31.220/m12qQlm08hCqWvJ.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-13 14:27:03	d710447b99c5d26cac4643f971557e7d1b792010942ec3a4fc43ada5c02317da	exe		AgentTesla
2020-07-10 11:45:07	95305595e6858d0f37de53a6fcde486fca7b4d44a7742d6f6387fb1677d78745	exe		AveMariaRAT
2020-07-09 11:48:06	a7b732a20e4255640c357284a6677f92e755cdfc0a1b7fc81f3a6928c72fe857	exe		AgentTesla
2020-07-07 22:48:08	7aaae6c45ee6feb80b03a8fc68cde52b3f7449bd4a69e1aabebbb2a34025e9ba	exe		AgentTesla
2020-07-04 05:46:03	4b7a9bd3c5ff602f9123047e42d7c66e7c452f57d5f7421d6bf1cb937bc64a44	exe		AgentTesla
2020-06-26 08:05:04	355c8b8775f6b728776e7fae1aae749b43475b0d6ee34d244bba666a434a4e70	exe		AgentTesla
2020-06-17 12:48:05	4e7be82dd028401bd9e0a3cfe812ac92e1d68e82b27ffaecd97943e4cacff209	exe		AgentTesla
2020-06-17 02:37:38	fd55e36f5d1d4da2caf47266bc9b12911566ad0dd1c98c0d42360ca8e0f82186	exe		AgentTesla
2020-06-17 02:35:00	013735f40ff44d748d4a22aa9600da757ed47f5dd1bba77e4bd430f3fc420658	exe		AgentTesla
2020-06-16 13:45:07	19aa35a26063239ea5ff6258f2aac95c4c36c496f43919ca8322b95527cbceaa	exe		AgentTesla
2020-06-16 12:49:05	5340e228e8ed4eb06f5017330bb7b1535296dae44163b2d4c1a1b8e64a0e342e	exe		AgentTesla