URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-09-28 19:39:54 | 194.181.228.180 | Not listed | AS8308 NASK-COMMERCIAL | PL | yes | |
| 2020-04-07 00:57:07 | 194.181.228.150 | wn30.webd.pl | Not listed | AS8308 NASK-COMMERCIAL | PL | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2024-03-13 14:06:05 | http://gbud.webd.pl/z/Agil.prm | Offline | ||
| 2020-04-16 21:46:13 | http://gbud.webd.pl/cli/Amiz3.exe | Offline | NanoCore | |
| 2020-04-16 20:28:03 | http://gbud.webd.pl/images/inv.exe | Offline | exe NanoCore | |
| 2020-04-16 19:35:04 | http://gbud.webd.pl/cli/Invo.exe | Offline | exe NanoCore | |
| 2020-04-07 00:57:07 | http://gbud.webd.pl/images/Amz.exe | Offline | NanoCore |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2024-03-21 19:01:10 | ef690fcbcaa26bb83a9f516d8beff2d1363aebb95082c5f8bb6fc37daf0a20c6 | txt | ||
| 2020-04-16 21:46:13 | a032cd20c067b83f1cab391af7671f7ae669de96dbf995f08580b14d218aeccc | exe | NanoCore | |
| 2020-04-16 20:28:03 | bac62444e5596faa509090f1330ed2d6357b4b3e5a0a61ddbb7df8d424fe3cb0 | exe | NanoCore | |
| 2020-04-16 19:35:04 | c4b8370a2f9b30c900f56ba9b2a405f5d4febde0515c52647af81b79eaf7febf | exe | NanoCore | |
| 2020-04-07 00:57:07 | 8f98784c107af1ace1c7437d885de9d5e7c253389c53a10ebb8a8d1b3c49477d | exe | NanoCore |
PL