URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	52.47.201.149
Firstseen:	2021-09-11 06:01:03 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-11 06:01:04	52.47.201.149	ec2-52-47-201-149.eu-west-3.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	FR	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-09-13 18:53:04	http://52.47.201.149/S2/B/Re_904656001200037xls...	Offline	32 a310Logger exe	zbetcheckin
2021-09-13 18:48:02	http://52.47.201.149/s2/b/re_85412000040631.exe	Offline	32 exe Formbook	zbetcheckin
2021-09-13 17:50:04	http://52.47.201.149/S2/B/New_592108806100xls.exe	Offline	a310Logger Karkoff	AndreGironda
2021-09-11 07:52:04	http://52.47.201.149/R1/Z/PL_52003200112.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-09-11 07:52:04	http://52.47.201.149/t1/z/ptl_062540167003231.exe	Offline	32 a310Logger exe	zbetcheckin
2021-09-11 07:47:05	http://52.47.201.149/r1/z/qtl_000027401622208.exe	Offline	32 a310Logger exe	zbetcheckin
2021-09-11 07:47:05	http://52.47.201.149/r1/z/shipping%20doc.exe	Offline	32 exe Formbook	zbetcheckin
2021-09-11 07:46:03	http://52.47.201.149/r1/z/pl_7000320066.exe	Offline	32 a310Logger exe	zbetcheckin
2021-09-11 07:46:03	http://52.47.201.149/R1/Z/BLT-018881033022.exe	Offline	32 a310Logger exe	zbetcheckin
2021-09-11 06:01:04	http://52.47.201.149/R1/Z/PAYMENT.exe	Offline	NanoCore	AndreGironda

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2021-09-13 18:53:04	854ac16a5d649c001c40195613a2885a4efebdd30f529c2a729d4451eecfd657	exe	a310Logger
2021-09-13 18:48:02	df344fc259f24af81530c6233e884b92803d190095a6809ab7db0a7609df4f08	exe	Formbook
2021-09-13 17:50:04	65c1dafe3221a730febd5044e75f1a54f63e7a0e7db0d2d59047f27aafa2b9c5	exe	a310Logger
2021-09-11 07:52:04	fca8a3b741242dff4e66deb713bcc278ad1da6ff219fcae1b98ea23f3640e9ca	exe	RedLineStealer
2021-09-11 07:52:04	0e0ccfc2fc413a387f833261d58ce176fa8178d30709b183f65cd255933f2172	exe	a310Logger
2021-09-11 07:47:04	3be8a41bb629cd3aec0ad28a8f7ab3d1645a538f233dceefc78332c4c48aebdd	exe	Formbook
2021-09-11 07:47:03	c0ead704ef1d5b9a6d60c2c3ad3b68a95a0e4dbef4f0a6fa2a477cde84d461c7	exe	a310Logger
2021-09-11 07:46:03	cba897dc82a468040a082fd6135edecb8dcdcd0f0fe1375adeaeff3262cc6504	exe	a310Logger
2021-09-11 07:46:03	3fb623de58c14ac8cd4d6e7248d1a05f511b5c39bb868c1d5dc57b7854e84cde	exe	a310Logger
2021-09-11 06:01:04	588ee342c6665d17d6df38f0daa6b2617b277382cbc0c3d577b559bf6f7f7ecf	exe	NanoCore