URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	3.65.2.139
Firstseen:	2023-01-23 18:32:03 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-01-23 18:32:10	3.65.2.139	ec2-3-65-2-139.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-01-24 15:42:04	http://3.65.2.139/read/Otblasbjyd.exe	Offline	AgentTesla	abuse_ch
2023-01-24 15:42:04	http://3.65.2.139/sch/DTL067520003470xls.exe	Offline	AgentTesla	abuse_ch
2023-01-24 15:42:04	http://3.65.2.139/read/Lsiydizj.dat	Offline		abuse_ch
2023-01-23 18:32:10	http://3.65.2.139/read/Ltrwmpfgvbk.exe	Offline	AgentTesla exe	abuse_ch
2023-01-23 18:32:10	http://3.65.2.139/read/Booking-02.exe	Offline	AgentTesla exe	abuse_ch
2023-01-23 18:32:10	http://3.65.2.139/read/Phdymmrmanm.exe	Offline	AgentTesla exe	abuse_ch
2023-01-23 18:32:10	http://3.65.2.139/read/Fdlobkpo.dat	Offline	exe	abuse_ch
2023-01-23 18:32:10	http://3.65.2.139/read/Oymyu.dll	Offline	exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-01-24 15:42:04	b1a5b664300ebe7d44ae27b9bae5b44c74faf5cf6b049a69127534ba55a43930	exe	AgentTesla
2023-01-24 15:42:04	1bfa1728f8dfebf677aa645ce0fc0016ae4100f5acdcf82d92efb1a965d10444	unknown
2023-01-24 15:42:03	c058428fc0a3365d024b7a5fc7dd4fc58f1059430012cfb68be6a8193b970ecd	exe	AgentTesla
2023-01-23 18:32:05	8d3fd3eec10c029620dce7c9831690246513b13c94c949b0ad285439eebc9c07	exe	AgentTesla
2023-01-23 18:32:05	0a9298cfad6a323e0f85f1a9117123e2e373a2cf9e443ed5453022d6f671d578	txt
2023-01-23 18:32:05	349992c327474a4d7b751d22e5551685791e99cc2af4f96e4853510507b16185	unknown
2023-01-23 18:32:04	a31eae7f138a4211f63b0f1e56740c833dc37f8d3cfd596c45200cdf74434f9c	exe	AgentTesla
2023-01-23 18:32:04	d616acafee9c520da0cec35b945c97e3cb02ac4de80c4f9938313af7667e007a	exe	AgentTesla