URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 194.180.49.211
Firstseen:2023-09-13 05:02:03 UTC
Total malware sites :26
Online malware sites :0 (0%)
Offline Malware sites :26 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-09-13 05:02:15 194.180.49.211Not listedAS201814 Mevspace- BGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-09-29 11:45:09http://194.180.49.211/bas/RAINN.exeOffline32 exe wshrat ext zbetcheckin
2023-09-29 08:38:06http://194.180.49.211/bas/RRAIN.exeOfflineexe wshrat ext abuse_ch
2023-09-19 10:08:08http://194.180.49.211/bas/Rain.exeOffline32 exe wshrat ext zbetcheckin
2023-09-19 10:08:04http://194.180.49.211/bas/F.exeOffline32 AgentTesla ext exe zbetcheckin
2023-09-19 10:03:05http://194.180.49.211/bas/BIN.exeOffline32 AgentTesla ext exe RedLineStealer ext zbetcheckin
2023-09-19 08:24:08http://194.180.49.211/bas/RRA.exeOffline32 exe Formbook ext RedLineStealer ext zbetcheckin
2023-09-15 06:20:09http://194.180.49.211/D/hamoriggin.txtOfflineAgentTesla ext vovaan
2023-09-15 06:20:09http://194.180.49.211/D/Okk.txtOfflineAgentTesla ext vovaan
2023-09-14 07:15:09http://194.180.49.211/D/knew.txtOfflineAgentTesla ext abuse_ch
2023-09-14 07:15:08http://194.180.49.211/D/fweb.txtOfflineAgentTesla ext abuse_ch
2023-09-14 07:15:08http://194.180.49.211/D/Bossf.exeOfflineAgentTesla ext abuse_ch
2023-09-14 07:15:08http://194.180.49.211/D/Bossk.exeOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:10http://194.180.49.211/D/DLLL.txtOffline abuse_ch
2023-09-13 15:25:09http://194.180.49.211/D/hamzavic.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:09http://194.180.49.211/D/allen.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:08http://194.180.49.211/D/gerenciaa.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:08http://194.180.49.211/D/cborinew.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:08http://194.180.49.211/D/tbow.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:08http://194.180.49.211/D/financee.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:07http://194.180.49.211/D/Nbin.txtOfflineAgentTesla ext abuse_ch
2023-09-13 15:25:06http://194.180.49.211/D/Gen.exeOfflineAgentTesla ext abuse_ch
2023-09-13 09:05:07http://194.180.49.211/D/CB.exeOffline32 exe RedLineStealer ext zbetcheckin
2023-09-13 09:05:07http://194.180.49.211/D/F.exeOffline32 AgentTesla ext exe zbetcheckin
2023-09-13 07:30:09http://194.180.49.211/D/fweb.exeOffline32 AgentTesla ext exe zbetcheckin
2023-09-13 07:30:09http://194.180.49.211/D/B.exeOffline32 AgentTesla ext exe RedLineStealer ext zbetcheckin
2023-09-13 05:02:15http://194.180.49.211/D/rain.exeOffline32 exe Formbook ext RedLineStealer ext zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-10-03 00:48:191affc29ed8eb44e7f67b63eeba9ac387770e311f5fcc7fb869436841a8712af1exe RedLineStealer
2023-09-29 11:45:08577b3a152ddc9d6558ad1b38ef6da89257229adf06d298ea025048a6d5d2fceaexeWSHRAT
2023-09-29 08:38:06ba1a738798423e40a68ace116d390c7aca541a4b6472c9139ab27d4af38710b9exeWSHRAT
2023-09-26 08:48:19a075c57c5e9ab478af53bbfa19faf2fecb404abd0d1ba953e84d347d5093f906exe RedLineStealer
2023-09-25 01:31:108e53746797bbecbef642259c5403297f4d3fa0bd1b4e6e3cd637011027e5ebc8exe  
2023-09-19 10:08:08bb1a60d48e67a57b363bc312e01f4d91a7dae7e4a11653156e554d468578e8f2exeWSHRAT
2023-09-19 10:08:04f9c14c336e5b170be91408221eb626e81a44aef3fb0a918a46ad4c4b6aaa3f00exeAgentTesla
2023-09-19 10:03:053a4b1e3cc1e298ce7440831ab41ef87b16e219175881350395564b81359889d6exeAgentTesla
2023-09-19 08:24:08a92311d1cc4808a5616f33a1592e9a00aa5efe0c47623e5e364068c7d7c9b0d5exeFormbook
2023-09-15 06:20:094e90dd186ac3a41405e6b9f889859c9955b1bfa6a73db1af2eac1b03910e7010txt AgentTesla
2023-09-15 06:20:096be270fca147f7bbdfbf79063a91b1764571825d24f11876aa4926580791c490txt AgentTesla
2023-09-14 22:22:29818349af93340cd386f77759dee201631be723048a0d9acb37734ce63f95a3a6exeAgentTesla
2023-09-14 22:21:21f71f5d2a525e1b368005021619851713c5318241e5020c8c5bdb1d677e160b0aexeAgentTesla
2023-09-14 07:15:09d13e01686e7db0655c6a8fbd620354a867bb4974e195568abcb86f02027a615atxt AgentTesla
2023-09-14 07:15:08fb48820e85670119c8d0c5ac6cef0c29dfa966a2b56b83ad4931c9fa84d18046txt AgentTesla
2023-09-14 07:15:08a19f1949995aa24c6afd60e3c19b54dd3823322385fe2e80734c09dabdec0131exeAgentTesla
2023-09-14 07:15:084160b16dae4f640dba8de3c1da4446a689e9c7506f24fbf79f6f632184ab8243exeAgentTesla
2023-09-13 15:25:107d5a55717401963e9a187640d096855b4786a0d8f1aac1819dc5463a39066979txt  
2023-09-13 15:25:095aa07d688473f7b3362d65544aa6eb7c0da2ab7e04054b04cc1d23f885ce7166txt AgentTesla
2023-09-13 15:25:0914ad2ff55e3edc41289c212733e9dc99f59fea0c8f66ec9fcaad0d9d97a894b7txt AgentTesla
2023-09-13 15:25:08c8b64ed56edb049e2e7e6bca1d4e731e4162f01ab837ea778622726932b43570txt AgentTesla
2023-09-13 15:25:088a099c69d03a9b81bbf10d15b9dd6ccb159205e836c5887c90974343559f6bd0txt AgentTesla
2023-09-13 15:25:08c533d8368bda589f3677128caa759da8d22f9836f0f4cea950d3ef4c6ffb1146txt AgentTesla
2023-09-13 15:25:08b5426f30ce963fddade6a43387fbbe27447fae12b60ecf4a6dc95307d0714724txt AgentTesla
2023-09-13 15:25:07134d9a42360bd96ee5f92a31e7ef429749ab516616e205b9321d01530febfb00txt AgentTesla
2023-09-13 15:25:069e25dda533ac947bcd6cfc48b65f30ec7898754888ad81bdcc85830bd8a43ec0exeAgentTesla
2023-09-13 09:05:07784cda9f8d5a1f70a189644e78f76d69c5b41434ac8ee66f77dff5141f0c4fb2exeRedLineStealer
2023-09-13 09:05:07cacad3326fba09f60283210655c8e9cafddaae194e156cc680db4f98d4920e5cexeAgentTesla
2023-09-13 07:30:09a7c1c1bb1cb6996be53907169a49b1b6d7c34a6dbb99c47538ce781e844d00a9exeAgentTesla
2023-09-13 07:30:0989ee49574b483077f00317a988fe5443ee4b3b3485b2b775e411f4d0235dc8baexeRedLineStealer
2023-09-13 06:11:37e5fa48dcc0604fb10d844d476df30106684af28205a7c150142e0b3bf4ef8687exeRedLineStealer
2023-09-13 05:02:14fa7b173ac1477fca66559947e5989ce2747465e1715f4d6a1e0bbcc72259ca58exeFormbook