URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 82.147.85.52 |
|---|---|
| Firstseen: | 2024-07-29 15:06:03 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 7 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2024-07-29 15:06:06 | 82.147.85.52 | 82-147-85-52.vpsdedic.ru | Not listed | AS211860 VPSDEDIC-AS |  RU | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-08-13 19:13:06 | http://82.147.85.52/build2.exe | Offline | Amadey |  Bitsight |
| 2024-08-02 14:11:06 | http://82.147.85.52/mimikatz.exe | Offline | exe hacktool mimikatz |  abus3reports |
| 2024-08-02 14:10:09 | http://82.147.85.52/update.exe | Offline | connectwise exe | abus3reports |
| 2024-08-02 14:09:10 | http://82.147.85.52/chisel.exe | Offline | exe hacktool | abus3reports |
| 2024-08-02 14:09:09 | http://82.147.85.52/AnyDesk.exe | Offline | exe | abus3reports |
| 2024-08-02 14:09:07 | http://82.147.85.52/Loader.exe | Offline | exe | abus3reports |
| 2024-07-29 15:06:06 | http://82.147.85.52/build.exe | Offline | exe LummaStealer | Bitsight |
The table below shows recent payloads delivery by this host.