URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 194.5.99.229.

Database Entry


Host:194.5.99.229
Spamhaus DBL:Unknown
SURBL:Not listed
Firstseen:2018-09-26 05:04:26 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-09-26 05:04:28194.5.99.229SBL434461AS60144 THREE-W-INFRA-AS -- TRANSIT --- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-10-16 23:55:03http://194.5.99.229:4560/met.exeOfflineexe Clean@JRoosen
2018-10-16 14:46:03http://194.5.99.229:4560/yel.exeOfflineexe Loki Clean@zbetcheckin
2018-10-12 09:05:04http://194.5.99.229:4560/yel.msiOfflineexe Clean@abuse_ch
2018-10-10 09:18:03http://194.5.99.229:4560/met.msiOfflineexe Clean@abuse_ch
2018-10-10 08:13:03http://194.5.99.229:4560/press1.msiOfflineexe Clean@abuse_ch
2018-10-09 14:27:02http://194.5.99.229:4560/yel2.msiOfflineexe Loki Clean@MattCulbert
2018-10-02 06:30:05http://194.5.99.229:4560/say.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:42:09http://194.5.99.229:4560/omo.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:33:04http://194.5.99.229:4560/bra.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:32:27http://194.5.99.229:4560/press1.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:32:22http://194.5.99.229:4560/arm.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:32:17http://194.5.99.229:4560/nel.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 14:32:12http://194.5.99.229:4560/stu.exeOfflineexe Loki Clean@zbetcheckin
2018-09-26 05:04:29http://194.5.99.229:4560/press2.exeOfflineexe Loki lokibot Clean@dvk01uk