URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	3.145.46.6
Firstseen:	2022-02-23 11:52:03 UTC
Total malware sites :	20
Online malware sites :	0 (0%)
Offline Malware sites :	20 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-02-23 11:52:04	3.145.46.6	ec2-3-145-46-6.us-east-2.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-02-26 08:16:08	http://3.145.46.6/K/ServerBIT.txt	Offline	ascii bitrat opendir rat	abuse_ch
2022-02-26 08:16:07	http://3.145.46.6/K/Server67.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:05	http://3.145.46.6/K/ServerHT.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:05	http://3.145.46.6/K/ServerCl8956.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:05	http://3.145.46.6/K/ServerMBK.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:05	http://3.145.46.6/K/ServerJT.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:05	http://3.145.46.6/K/ServerLGDQ.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncASY.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncMBK.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/Enc98.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncLGDQ.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncCL8956.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncJT.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncHT.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:16:03	http://3.145.46.6/K/EncBIT.txt	Offline	ascii opendir rat	abuse_ch
2022-02-26 08:15:05	http://3.145.46.6/K/ServerASY.txt	Offline	ascii AsyncRAT opendir powershell ps	abuse_ch
2022-02-23 11:52:08	http://3.145.46.6/K/90W.txt	Offline	ascii AsyncRAT opendir powershell ps	abuse_ch
2022-02-23 11:52:04	http://3.145.46.6/K/EncL.txt	Offline	ascii opendir powershell ps	abuse_ch
2022-02-23 11:52:04	http://3.145.46.6/K/ServerFAH.txt	Offline	ascii N-W0rm opendir powershell ps	abuse_ch
2022-02-23 11:52:04	http://3.145.46.6/K/EncKAO.txt	Offline	ascii opendir powershell ps	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2022-02-26 08:16:08	55d9f8fd2cee94521b69df090378f7a1ef21d28a06e22002319d9279c4f8da36	txt	BitRAT
2022-02-26 08:16:07	6b69a9f079007faa162b87f02d02583370adc3c558f43f6c731129dd9fd65c1f	txt
2022-02-26 08:16:05	d1be7172bd35de438975100adf59a0904fc795e887cdce9e7ee4e0ad0bc59d82	txt
2022-02-26 08:16:05	6ee7cb562cd0b7857b5dd2b835415cbed4c01e3a2c27ddf4486384e29411b96f	txt
2022-02-26 08:16:05	6ab23828720b88d4f9bec848af1ec080cc91ff4021b45719090187aba23ada11	txt
2022-02-26 08:16:05	b6313fc0f64d06da6394b4d5acdcddc264dd59750d190796cce37d7cac0f03e1	txt
2022-02-26 08:16:04	85760600d2064d3587cf085732a5a6ee1b3b572af29f74bcfd3e6201791dbf00	txt
2022-02-26 08:15:05	75a206b93871f0af179a43fced285f4f6aa992f603337245154be125ba91c5a7	txt
2022-02-23 11:52:08	f9a566c94783c5d9f75b0f98c1310e05e5968b35b5229b07b7a54ea072890399	txt	AsyncRAT
2022-02-23 11:52:04	32060ba18c4ed29f6a441b6193a2e6376bb43c752709558f046e9365b7275559	txt	N-W0rm