URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host paparra.net.

Database Entry


Host:paparra.net
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-04-11 19:59:12

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-10-12 00:58:13184.168.221.40ip-184-168-221-40.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-10-11 19:16:47184.168.221.51ip-184-168-221-51.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-10-11 06:18:46184.168.221.56ip-184-168-221-56.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-29 16:56:07184.168.221.43ip-184-168-221-43.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-29 13:33:3350.63.202.53ip-50-63-202-53.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-22 03:42:0850.63.202.61ip-50-63-202-61.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-21 15:29:31184.168.221.53ip-184-168-221-53.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-15 07:20:0550.63.202.36ip-50-63-202-36.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-05 14:39:1750.63.202.56ip-50-63-202-56.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-05 09:22:55184.168.221.48ip-184-168-221-48.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-05 07:50:25184.168.221.39ip-184-168-221-39.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-05 06:48:5550.63.202.59ip-50-63-202-59.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-08-05 06:43:0150.63.202.39ip-50-63-202-39.ip.secureserver.netNot listedAS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- USno
2018-04-11 19:59:2269.163.153.184apache2-bongo.cecil.dreamhost.comNot listedAS26347 DREAMHOST-AS - New Dream Network, LLC- USno

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-04-12 12:14:26http://paparra.net/ufV1wGm/Offlineemotet payload Clean@JAMESWT_MHT
2018-04-11 19:59:22http://paparra.net/Invoice/Offlinedoc emotet heodo Clean@cocaman