URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 3.120.153.6.

Database Entry


Host:3.120.153.6
Spamhaus DBL:Unknown
SURBL:Not listed
Firstseen:2018-11-15 17:35:46 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-11-15 17:35:483.120.153.6ec2-3-120-153-6.eu-central-1.compute.amazonaws.comNot listedAS16509 AMAZON-02 - Amazon.com, Inc.- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-11-24 02:41:04http://3.120.153.6/fil.msiOfflinemsi Clean@zbetcheckin
2018-11-24 02:33:06http://3.120.153.6/joe.msiOfflinemsi Clean@zbetcheckin
2018-11-23 08:29:03http://3.120.153.6/iu.msiOfflinemsi Clean@zbetcheckin
2018-11-20 14:40:11http://3.120.153.6/new.msiOfflineexe-to-msi Loader Clean@de_aviation
2018-11-17 02:42:03http://3.120.153.6/uji.msiOfflinemsi Clean@zbetcheckin
2018-11-16 00:33:02http://3.120.153.6/plp.msiOfflinemsi Clean@zbetcheckin
2018-11-15 17:35:48http://3.120.153.6/ues.msiOfflineexe-to-msi Loki lokibot Clean@de_aviation