URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	88.218.16.20
Firstseen:	2020-07-20 12:51:02 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-20 12:51:04	88.218.16.20		Not listed	AS213953 MizbanDadehPardis	IR	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-08-10 15:44:06	http://88.218.16.20/miccrypted.exe	Offline	AgentTesla	Anonymous
2020-08-10 15:43:04	http://88.218.16.20/flocrypted.exe	Offline	AgentTesla	Anonymous
2020-08-10 15:42:10	http://88.218.16.20/royalcrypted.exe	Offline	AgentTesla	Anonymous
2020-08-10 15:42:08	http://88.218.16.20/jojocrypted.exe	Offline	AgentTesla	Anonymous
2020-07-20 12:51:04	http://88.218.16.20/ztYQWLnqiKzUcTg.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-08-10 15:44:06	500ca56a7de01fbde3cdd1fcb392eb2a77b2706665a7a2e08e00ce8b405c27d5	exe	AgentTesla
2020-08-10 15:43:04	897a1305d267937baedeaf75e35e386efbb9c5d7d66819aaecfd885e84196142	exe	AgentTesla
2020-08-10 15:42:10	19a8e4f9fb01ff4333c81f78bba61e42d516c860e8974e059be82f2bf9d5a641	exe	AgentTesla
2020-08-10 15:42:08	17431eab4f753e88127e1bf94a796cb4f001ae3c0300ed8b98522713e7ac8e8e	exe	AgentTesla
2020-07-20 12:51:04	b87cc774298ac7e6db8019cfd657e7d9874d638d034238d260e0bf08f1b7f23d	exe	AgentTesla