URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-05 12:58:06	198.12.84.79	198-12-84-79-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-28 10:05:06	http://198.12.84.79/0010/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch
2021-10-27 12:11:05	http://198.12.84.79/0078/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch
2021-10-26 14:25:06	http://198.12.84.79/0095/vbc.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-10-26 12:59:05	http://198.12.84.79/0091/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch
2021-10-21 08:41:04	http://198.12.84.79/0050005/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch
2021-10-19 08:15:06	http://198.12.84.79/00660066/vbc.exe	Offline	32 AgentTesla exe	zbetcheckin
2021-10-18 12:31:09	http://198.12.84.79/0011000/vbc.exe	Offline		ps66uk
2021-10-13 14:13:07	http://198.12.84.79/20090/vbc.exe	Offline	AgentTesla exe	abuse_ch
2021-10-12 08:39:05	http://198.12.84.79/090009/vbc.exe	Offline	AgentTesla exe	abuse_ch
2021-10-11 06:59:05	http://198.12.84.79/0077/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch
2021-10-05 12:58:06	http://198.12.84.79/0789/vbc.exe	Offline	AgentTesla exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-28 10:05:06	7284b6f9216d4b5ce89420eee2e6f805e1f4c6b21212befe41d07e3badd390b3	exe		AgentTesla
2021-10-27 12:11:05	ceab3f0217330cadde13448dac5f671cb69707995884e61bae9bd88f12f45ce2	exe		AgentTesla
2021-10-26 14:25:06	c37506485694a1440ecbf47a0084a3691084e0869abb163f353fe081e1c49670	exe		AgentTesla
2021-10-26 12:59:04	f6069c39a20f6920e5900ceaf4ed66794b078b7ed7804a33fe169cfed9bae0ec	exe		AgentTesla
2021-10-21 08:41:04	2d27046c2b2fb934bedac546cc0dcea64fd788baff5eccfcf52b430df453a6ae	exe		AgentTesla
2021-10-19 09:46:12	9a9afba677dbf0bc1414700a609a6a4145e4bb2d07f4d4d672e34b2209a72f5c	exe		AgentTesla
2021-10-19 08:15:06	55827efa0f144f47c34b99d416bc1ffce3daf421da009cbf02f03dd1a3511a22	exe		AgentTesla
2021-10-18 12:31:09	2b21645c16dbd8d418855f10c33f8a35b840e8103de27271e66847fdd4c5d288	exe
2021-10-13 14:13:07	dc07322ef1652695b5e85bfd5d6da8c5b6c311d26ff13eb18a390cd4b7232203	exe		AgentTesla
2021-10-12 08:39:05	ae945b72d3cf4d6c2caee7f56bd63396bc9dfae056b816fd974dca6b4d3b2ae4	exe		AgentTesla
2021-10-11 09:30:53	f95ebfd15f9b16c6c303ca343773c8c44b226c7343ac7aa4afac8045c6b1a5e1	exe		AgentTesla
2021-10-11 06:59:05	9a77338e958d0395f1906dec2d49b68b8418ec6a5b01b6f86704be52fe6f9a52	exe		AgentTesla
2021-10-09 11:37:44	3b87fd56398f26a16f289bd694f13aa7a16b9cc20bfec717b89974b83df14ca9	exe		AgentTesla
2021-10-05 12:58:06	a04979ab597b661bbc3b05d8182a886ef390e7127dcef4d2fb044cd720f1e781	exe		AgentTesla