URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-02-22 06:48:15	58.218.67.253		Not listed	AS4134 CHINANET-BACKBONE	CN	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-02-22 18:58:13	http://58.218.67.253:281/4.exe	Offline	exe hfs opendir younglotus	abuse_ch
2021-02-22 18:58:12	http://58.218.67.253:281/2228.exe	Offline	CoinMiner exe hfs opendir	abuse_ch
2021-02-22 18:58:12	http://58.218.67.253:281/2.exe	Offline	CoinMiner exe hfs opendir	abuse_ch
2021-02-22 18:58:10	http://58.218.67.253:281/1.exe	Offline	CoinMiner exe hfs opendir	abuse_ch
2021-02-22 18:58:09	http://58.218.67.253:281/daji.exe	Offline	exe hfs opendir	abuse_ch
2021-02-22 18:58:07	http://58.218.67.253:281/Server.exe	Offline	exe hfs opendir	abuse_ch
2021-02-22 18:58:07	http://58.218.67.253:281/3.exe	Offline	exe hfs opendir younglotus	abuse_ch
2021-02-22 18:58:05	http://58.218.67.253:281/xiaolang.exe	Offline	exe hfs opendir Redosdru	abuse_ch
2021-02-22 18:57:05	http://58.218.67.253:281/xiaolang1.exe	Offline	exe hfs opendir Redosdru	abuse_ch
2021-02-22 06:48:15	http://58.218.67.253:281/NetSyst96.dll	Offline	dll Redosdru	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-08-24 08:03:10	38f32d4407d8fd264c2f5585340fb472325e066d335bcb7de398c4e033c04c84	exe
2021-05-13 14:24:54	a1506ac848fe419d4763876996c4b350f4a8ebe8827abdfa219ba22795825da8	exe
2021-04-10 08:32:31	265e8f7541f77935e865658b03261652382ad07945258f9a8cd94887f9a1a8dd	exe
2021-03-18 05:42:07	c4a9c0f2350db33cb5e758e17448870b3e00aa3dd1c27758a116264beee20236	exe		CoinMiner
2021-03-08 15:49:07	a306388cc05d790f39fa6f9cfc688fa4b907038d82ea8086b6dda558a55f010a	exe
2021-03-07 13:51:15	8da01fa3b9b7504e932a29dd19676796c6cc7b114dd8b19f17aee49d6f7f1ea6	exe
2021-03-01 12:29:58	4288f372ac29a190f68919ad434f3bb2630ca2c7b242deb158652ea0b84e5936	exe
2021-02-28 11:55:26	ff22dd3c465b32a0544880af75f507b2b36c8e7b3dce1e4745655d592dbdb6a5	exe
2021-02-27 18:25:00	857369672b83a9ad4aedd0702f0fcc19df5bacf8f0b9fdd1662eb2ab59a9a05d	exe
2021-02-25 18:47:32	ba90c42d452ef696824215f7a342c34c082b380dd22376de03a9e05a389d3414	exe		CoinMiner
2021-02-25 14:32:17	6fe31e8a8d86457ee7bdaccd10505c9647980a89bac9859fc4489e0450a102bc	exe
2021-02-25 11:11:55	d5623debe936c1ba45cd8d832fc04f852dbdad11735be259560f13ed0027d705	exe
2021-02-25 05:48:36	bbe8dc9bc5de26f31385b7b23c6f21a19a76686936e0afaeff9fd9690d71d3a0	exe
2021-02-24 15:18:36	cd61ce526c3cf535c4cd3e5d82547b847850f6ad791f7a66d52abc72f0925f63	exe
2021-02-23 20:09:48	0c3fb40a83e388130a98360fd5cbbd3db28ff8a9c0d2e20164a4bfc5c9793984	exe		CoinMiner
2021-02-23 12:06:47	3bfe9df1536e6d40887590dc8727214960b4c0fb4c2155a21eebd64b3ed65e61	exe
2021-02-22 20:20:46	d06f9a463e91488e637e3ad7bb231d2943b2c2b2f973800645e4d5e7043f7fe4	exe
2021-02-22 18:58:13	613a7aa7078212d20dab6f9c0d0e1d89274f190ae992c151cd292af87d9d7443	exe		YoungLotus
2021-02-22 18:58:12	389ddb82e254c476a6e3e2534182314d4702ce525371c2bcd5da6ef19d4851fb	exe		CoinMiner
2021-02-22 18:58:12	ea45f9b3dd2e613bb9cb0659dcf6d66ca092738fc510e37226bb99542ad685c8	exe		CoinMiner
2021-02-22 18:58:09	f2e9b563cfb903599a87072f6f36d77c02eb4a9c885e7c8da435f4f02801ad15	exe		CoinMiner
2021-02-22 18:58:09	9f905e04970d3c86d99ddb67052f2f948605a26891d085d1ab431a693260e155	exe
2021-02-22 18:58:07	c3304ec52968793ae709cf7c7caad6acae0bded8088f06cefbee55bde0a9224f	exe		YoungLotus
2021-02-22 18:58:07	8eb11e49eff426eba9d7fa1172c03744a35eb18a806660ec3f1eb3b107a26905	exe
2021-02-22 18:58:05	b19f2c2eec099ce6116313fff9348927a979584c82338f16c4f24231100dbd4b	exe		Redosdru
2021-02-22 18:57:05	34678b770d14c0c083d66b148f5d368117d1008b9b756c3753cd9e3535acae1d	exe		Redosdru
2021-02-22 06:48:15	7baee22c9834bef64f0c1b7f5988d9717855942d87c82f019606d07589bc51a9	unknown