URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-25 05:40:13	104.20.40.84		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-07-25 05:40:13	172.66.165.227		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2020-01-29 13:16:42	202.73.25.65	colo1.tabalongkab.go.id	Not listed	AS141892 IDNIC-SENGKED-AS-ID	ID	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-01-29 13:16:42	http://bpbd.tabalongkab.go.id/cgi-bin/IBEHVS/	Offline	emotet epoch3 exe heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-02-02 07:09:30	0ddde52ca3e01fdf8dbaff394135e34de7f446d8d47942329f9b9832b3b2246a	exe		Heodo
2020-01-31 23:57:41	6c847a24d6807c39d466085a2660b8ab1220a9f5139c19e2d8bfcfc65f7b85c7	exe		Heodo
2020-01-31 14:08:19	86ecdf00f7febc92b3a3ba959f214aa66dbe5fd566c35df1296db27917bcfb20	exe		Heodo
2020-01-31 11:55:08	43cdfe773032939e044c7a134f8b477d631b4cd98e6d649419185e605554ae8b	exe		Heodo
2020-01-31 11:44:31	9d872e26dc6fe32b58c87c9a00bfe59165d76694ed8a96a06a8605638b7a0431	exe		Heodo
2020-01-31 08:58:19	bf23ddd580f58505bfbf7354fd89a2aea35e9eeab3ce5f82a7b4494ccda0c144	exe		Heodo
2020-01-31 05:56:16	a04d18f1daef8282533eaf418c5d5d890c03c45e0d375a90358d7e9dbdeae233	exe		Heodo
2020-01-30 20:35:37	d47544d1426eeba49e8508366aa47672270ffdce5dbbc80b449dcec6468fd11b	exe		Heodo
2020-01-30 19:04:15	7b9ba41ce53c642ab4a8e542fd10463877bf9046163a15e96ead526840a67de3	exe
2020-01-30 18:28:45	2ab2fe98d198f0d4a823c0cce6a7306c9967919b3548cf93d8b6da7f84b82cb8	exe
2020-01-30 13:50:09	86da7b1170ba7a56cd456a809ddb50bd02453d3b3241bd0ae8c7f1a841af456f	exe
2020-01-30 12:20:37	6d8712f3348a3cf65b039f3511d0ab9ca8387d9ceb9ab3879a5f077a14b0e53e	exe
2020-01-30 11:02:41	cc415377d5106f08b33a71819aeb6e3df976b079edb6ec676364beeb16f961b2	exe		Heodo
2020-01-30 02:24:39	656aa0d22447d67dd1d55db2ed36faf2390d0c960b0d295e6b209f8118b575dc	exe
2020-01-29 20:35:29	5776b50e048d64817d805404627c30ae42803a1f0d3db5eef5908a0e3f39326b	exe
2020-01-29 19:10:23	84b34f5f6fa7e85108125cf909b51ff05cc9c276023497cf1cb1cfb808a7b293	exe
2020-01-29 13:27:17	b8dd80416160c5f32703f28077356faad3cc0ca0e38d1a09f74148add672de43	exe		Heodo