URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 198.23.213.57
Firstseen:2020-11-18 07:45:04 UTC
Total malware sites :15
Online malware sites :0 (0%)
Offline Malware sites :15 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-11-18 07:45:06 198.23.213.57198-23-213-57-host.colocrossing.comNot listedAS36352 AS-COLOCROSSING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-01 09:00:06http://198.23.213.57/LAW.exeOfflineAgentTesla ext exe abuse_ch
2022-02-24 18:22:06http://198.23.213.57/ppp.exeOfflineAgentTesla ext exe abuse_ch
2022-02-23 13:06:05http://198.23.213.57/ooo.exeOfflineAgentTesla ext exe abuse_ch
2021-03-31 17:54:07http://198.23.213.57/bbb.exeOfflineAgentTesla ext exe abuse_ch
2021-03-29 18:04:12http://198.23.213.57/bob.exeOfflineAgentTesla ext exe abuse_ch
2021-03-25 14:26:06http://198.23.213.57/lol.exeOfflineAgentTesla ext exe abuse_ch
2021-03-24 07:10:05http://198.23.213.57/local.exeOfflineexe Formbook ext abuse_ch
2021-03-22 14:01:05http://198.23.213.57/razi.exeOfflineAgentTesla ext exe abuse_ch
2021-03-17 15:50:07http://198.23.213.57/jesus.exeOfflineAgentTesla ext 0x746f6d6669
2021-03-16 19:20:09http://198.23.213.57/rrr.exeOfflineAgentTesla ext exe abuse_ch
2021-03-15 09:23:05http://198.23.213.57/GOD.exeOfflineAgentTesla ext exe abuse_ch
2020-11-25 15:23:04http://198.23.213.57/CFILEE.exeOfflineAgentTesla ext exe abuse_ch
2020-11-23 18:54:06http://198.23.213.57/Ohms.exeOfflineAgentTesla ext exe abuse_ch
2020-11-19 18:05:06http://198.23.213.57/fank.exeOfflineAgentTesla ext exe abuse_ch
2020-11-18 07:45:06http://198.23.213.57/UGO.exeOfflineAgentTesla ext exe abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-01 10:30:3021e8f320c4de087f2cf76595ea4c3b705c0d80fa537ebd8584e4d66b495181d1exeAgentTesla
2022-03-01 09:00:06c1c4efe3fecd680de5ef29415e1e364f8877a10ac7f5457529a749a3661a6771exeAgentTesla
2022-02-25 04:32:27d066e099e6bf0a48ff1f7e6e7d3b0b54ccc47080045de0b93ac24b5d3d4351cbexe AgentTesla
2022-02-24 18:22:0661078d7804eb6203dacc547fc1d9c44184462c29687c9b22b08f2601fbbb989cexeAgentTesla
2022-02-23 13:06:0582a9142ae8e93f4cb4d723ea393084a2802bead7267ea3d7cc2dcc86c35ed9edexeAgentTesla
2022-02-17 08:46:269a3790d836b29174fdb23a5b7612ddd03c510157b7a55712b00c424b669c24acexeAgentTesla
2022-02-16 13:27:02f65ba3376297474cfa75a6cd19cea2036f5735ed12fd7f5e4177024feeeeebd9exeAgentTesla
2022-02-16 10:53:04cc7c664530f49ce71a529b43319933f778948f5cde08d8592e4259b8428a94ccexeAgentTesla
2022-02-15 16:39:58257015ec9c05ee37bf2492c0d41884a8d70347f02664850a55c77379b5a12c07exeAgentTesla
2022-02-15 08:04:54d4ac2f1250d555a2681739d862614fa1735e58f67ba94ec15e9fb4944d5a50d7exeAgentTesla
2022-02-14 15:39:355fd8ce1ead90e9ef50055ee61b68b5b94858f8ca2478c8e68bad04871e317b8fexeAgentTesla
2022-02-14 13:40:164ea4984ea96300ac77002b130bba2e22f4e2469dd9d3faf00eb269e2cad822c3exeAgentTesla
2022-02-01 21:21:394a61500118a047e49bdb3f82bef14a068737aea193830f4a8fd5b6ceb0ba5bb0exeAgentTesla
2021-05-04 13:35:368353e30c6566795da3e5aa38a22b4707ee895cfa115ffa399cfbe7d57d00f91dexeAgentTesla
2021-05-04 12:36:48612d1888d98714893e69c4649a46a990c9c26367834d5be5afc05df15e913572exeAgentTesla
2021-04-30 05:27:05e0835ed940bbcc9e1b6d0da706aab1029b489903ec75e0ab808e21ebe8c552adexeAgentTesla
2021-04-27 00:58:168aabfb2b5aeee025f4a6d963c8761011efb74797e37ee89fd37ae5c23f7f2945exeAgentTesla
2021-04-26 14:30:35ec265177529ab61116c59e3361436b6c4f9e48bbef4488d2d3a97ebdb2f9837aexeAgentTesla
2021-04-22 05:34:12679ebf79dd090c45ab0777aea92e3f2dc6b8199eb8cd17fb7ca50e6239ccb62eexeAgentTesla
2021-04-22 00:28:149fadae8c6a192536c41677546bc32e530d38084906e8be610573538f0955c49dexeAgentTesla
2021-04-19 18:06:161a7720b25ae149d40bf3546912560968ed2d6731857261632fea0693df6fa013exeAgentTesla
2021-04-01 09:11:14de63a44a558761ac51c3415f0b2f0b37d7c440aac7935063b4a789b89bc6cd5cexeAgentTesla
2021-03-31 17:54:07bb3ba719b05e0809465a06648088ba0d1e3c6e1ae2bd7b99671010c10da1e712exeAgentTesla
2021-03-29 18:04:12b76243a9ae60bf3ddebc1d9c037b81b2a677aae1928c026282bc543837c45ef9exeAgentTesla
2021-03-25 14:26:0610d40d8ea3d7b67007bcba4f2286e136579e28c2a14c207ed522dde9063994e5exeAgentTesla
2021-03-24 07:10:0526d86609838feaa6357a71b0801ad4b9cb8efb31aaf76f6a7a8bf012ab60b262exeFormbook
2021-03-22 14:01:051d09b5416199a1d7eea4c54b9202a55773dc3598822b22028be000f32ce61ae9exeAgentTesla
2021-03-18 14:44:39c5d51b412716cb23b237dfb43f0cbd62191f357ccea814f37394e7d019221fb4exeAgentTesla
2021-03-17 15:50:07b8d2d8256bd8611011c3a33010dba982649acfbdce46270925ee14a6bdfa6d94exeAgentTesla
2021-03-17 00:48:22d56296d4915603077c6590fe7367b713770b02b8045541f2a1bef5ede1f9e82cexe AgentTesla
2021-03-16 19:20:09393581c18056d7a4d1f141bbdff6c4d9006c1d15443ec16567802b37209e7720exeAgentTesla
2021-03-15 14:34:5312f38366023fc48b9957b3aacbb6566eb65e7e70c67a520d19faac4acd699db5exe  
2021-03-15 09:23:053a653867bb586489975da401f7f434fc1b09c228a02873b495e49ed9685c38ddexeAgentTesla
2020-11-25 15:23:04c82ef9c3d52ada23f70ee02b08aa6db8258049846a3098dd193b47d187b643aaexeAgentTesla
2020-11-23 18:54:06b49c6a2d089b5b8e50c79894e0ab216c3bad852e66af30ed4764fd79d69251a6exeAgentTesla
2020-11-19 18:05:06d5a223eb8c06bbf68154cf437c5b010d9d7daf57d03339068892a94e0166f3d5exeAgentTesla
2020-11-18 07:45:068d244157f6c54e00f04b3e7064f8aeecef8ec589c4e50d1a635db6cc93d9be6eexeAgentTesla