URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-10-15 23:03:10	185.12.92.46	isp101.deserv.net	Not listed	AS210079 EUROBYTE	RU	yes
2025-04-27 13:35:40	178.208.68.114	vip15.deserv.net	Not listed	AS210079 EUROBYTE	RU	no
2019-08-12 05:05:04	93.171.220.114		Not listed	AS51495 AGTS-AS	TM	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-08-12 05:06:09	http://beckerpiano.ru/wp-content/languages/spen...	Offline	AgentTesla exe	abuse_ch
2019-08-12 05:06:07	http://beckerpiano.ru/wp-content/languages/TOO1...	Offline	exe	abuse_ch
2019-08-12 05:06:04	http://beckerpiano.ru/wp-content/languages/OUT.exe	Offline	AgentTesla exe	abuse_ch
2019-08-12 05:05:04	http://beckerpiano.ru/wp-content/languages/ME2.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2019-08-12 05:06:09	eeb8eecc0ce936510646e24aa6cbedbf753869742522e2ed0c67233c64ef25b4	exe		AgentTesla
2019-08-12 05:06:07	1409ddd7d792b328f7de534850948b1af29347e657e03666096c1ec240a54643	exe
2019-08-12 05:06:04	2950dcc01d3608162a02bcb638fcd7d91f1d041e34834eef40af834b943338da	exe		AgentTesla
2019-08-12 05:05:04	97ad2cef166527d3d9f808bc7fc0da8e73f4fa6a3405c785f468ded0d69f49d3	exe