URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 45.88.90.68
Firstseen:2024-04-16 11:30:13 UTC
Total malware sites :3
Online malware sites :0 (0%)
Offline Malware sites :3 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-04-16 11:30:33 45.88.90.68Not listedAS41798 TTC-AS- KZyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-04-16 13:35:13http://45.88.90.68:5000/Install.exeOfflineexe abus3reports
2024-04-16 13:31:14http://45.88.90.68:5000/%2477system.vbsOffline$77 CoinMiner trojan vbs abus3reports
2024-04-16 11:30:33http://45.88.90.68:5000/%2477xmrig.exeOfflineCoinMiner abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-04-16 18:18:2857569b6cd7997332f45589de689b2dda2d41a3817f49a8050fbed2986a871296exe  
2024-04-16 13:35:1372f88388a72f5182c4873902b677a90706998d5fc8a945abc8f7ae1c6a9231e7exe  
2024-04-16 13:31:1406a9de0b7a1ce8a57375a10ea12f030a618e5f56d695f7e582c6ff79e7554757unknownCoinMiner
2024-04-16 11:30:28810838fe05bf0fac2ca9659efa6d2d5bb6f0e324ce9330ad1ba6ec636844fb84exe