URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 5.199.143.127 |
|---|---|
| Firstseen: | 2020-03-23 16:10:03 UTC |
| Total malware sites : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2020-03-23 16:10:05 | 5.199.143.127 | three.tenuous.de.com | Not listed | AS24961 MYLOC-AS |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-03-23 16:10:05 | http://5.199.143.127/bin.exe | Offline | avemaria  AveMariaRAT exe |  jcarndt |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2020-03-26 16:30:47 | bcf92b495b72e89935eec7f060f8ddbab22d1c111ba350fff3d8c3e1bad9d30d | exe | AveMariaRAT | |
| 2020-03-26 02:26:11 | 1f7930856fa1f025eb3d63c1f35171c05f0ef09e895296ffac6d7a41fad13667 | exe | AveMariaRAT | |
| 2020-03-23 16:10:05 | ee0d5b01937cc5e1ad3168162f26804e4a2749fb2e04b36fba4aa1974eaeca6b | exe | AveMariaRAT |