URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-06-04 13:09:06	5.152.203.118	h5-152-203-118.host.redstation.co.uk	Not listed	AS20860 IOMART-AS	GB	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-06-04 13:09:06	http://h5-152-203-118.host.redstation.co.uk/nas...	Offline	exe NanoCore	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-06-18 02:39:22	d1bf5b785bdb2cb6189fb1af0762dbe101571c49bfb679f7212f80b3265ce7b7	exe
2020-06-17 12:12:25	6473dd0387b598f5484812c910cea1e3929be00dcf7627fd39a69bfbd06061fb	exe		NanoCore
2020-06-17 02:28:50	34f1b02bdccebe61deb518957acd32c9a64ce358102db3be15ed7d46f9945004	exe		NanoCore
2020-06-14 21:29:06	ad9b31618184bb980a5e825fcb465913f3002077043fc5e3a761653473a4dce0	exe		NanoCore
2020-06-10 10:46:40	0fb26042a8a31d0db10d1302875a6f44d5aa5dd369b309795172dc957eef5c4a	exe		NanoCore
2020-06-09 11:45:32	818a6583ed6a32a51b5b576c7dba0c47fd3f243ab8016494ce6372ee6d0e91fb	exe		NanoCore
2020-06-08 21:30:53	21a0a09fd4ee92d560dc644492a538001f5f5c22d2c1c562a4955ac740ba66a1	exe		NanoCore
2020-06-07 22:32:47	a2d6f81373b31670a8500a714aad457d705f07966dbadf260ec963a954061d00	exe		NanoCore
2020-06-07 06:35:34	fb5bae3dabbf6aec4c7812eb286414b8665173fa2daabf794c571d61ae3eaa36	exe		NanoCore
2020-06-04 13:09:06	f9614b985dcb06d9c40448e4ecf1a94ce2cd69e54f6acbeca7b6deec54aafdb3	exe		NanoCore