URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 45.149.241.183 |
|---|---|
| Firstseen: | 2024-10-30 06:43:03 UTC |
| Total malware sites : | 6 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 6 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2024-10-30 06:43:04 | 45.149.241.183 | Not listed | AS57653 CTL-AS |  GB | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-11-06 08:02:08 | http://45.149.241.183/vvveedoooo.txt | Offline | AgentTesla  ascii Encoded rev-base64-loader |  abuse_ch |
| 2024-11-06 07:59:06 | http://45.149.241.183/Americana.txt | Offline | AgentTesla base64 rev-base64-loader |  abus3reports |
| 2024-10-31 20:10:06 | http://45.149.241.183/cummmconstraints.vbs | Offline | RemcosRAT | abus3reports |
| 2024-10-31 20:08:06 | http://45.149.241.183/Dududududud.txt | Offline | AgentTesla RemcosRAT rev-base64-loader | abus3reports |
| 2024-10-31 20:07:03 | http://45.149.241.183/MPDW-constraints.vbs | Offline | RemcosRAT | abus3reports |
| 2024-10-30 06:43:04 | http://45.149.241.183/disparar.js | Offline | AgentTesla ascii GuLoader js | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2024-11-06 08:02:08 | 36cb09e4ff67d5495bafb892243773781ebe8236073aca4dd15efcce792bb9ed | txt | AgentTesla | |
| 2024-11-06 07:59:06 | 03a18a555a7edce5c88a8af9597443cf22f96b4668e6805cbdd7fb34b4026c9d | txt | AgentTesla | |
| 2024-10-31 20:08:06 | 42a797d7ad180ab40c605d31d9af6871534140e8158050e1c4deb095c262bc08 | txt | AgentTesla |