URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2022-09-14 09:49:26 | 81.17.29.146 | hostedby.privatelayer.com | Not listed | AS51852 PLI-AS |  CH | no |
| 2022-06-15 16:55:12 | 99.83.154.118 | a51062ecadbb5a26e.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | no |
| 2021-07-08 15:28:11 | 192.64.117.221 | server306-5.web-hosting.com | Not listed | AS22612 NAMECHEAP-NET | US | no |
| 2022-09-14 19:30:33 | 81.17.18.194 | hostedby.privatelayer.com | Not listed | AS51852 PLI-AS | CH | no |
| 2022-09-19 20:36:23 | 81.17.18.196 | hostedby.privatelayer.com | Not listed | AS51852 PLI-AS | CH | no |
| 2022-09-21 16:18:02 | 81.17.18.197 | hostedby.privatelayer.com | Not listed | AS51852 PLI-AS | CH | no |
| 2022-09-17 15:35:54 | 81.17.18.198 | hostedby.privatelayer.com | Not listed | AS51852 PLI-AS | CH | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-07-08 15:28:11 | https://tulgerosp.us/rdpa.exe | Offline | exe ServHelper  |  abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-07-10 08:34:48 | 91d8870ce872fc1d99181a961e4b3735152e7aa77b714b015efd594fd923eea2 | exe | ServHelper | |
| 2021-07-09 18:46:14 | 2142824c415eb4f05facc471942840e5065aa41b322f36dac198d30d00e8b6fc | exe | ServHelper | |
| 2021-07-09 04:55:05 | 762ceefe80db24a8eba8a2ca2ba5e194e94b87af7cfe9db04b112169bba65cb0 | exe | ServHelper | |
| 2021-07-09 03:41:51 | db42a8611955764c06470e16ce3a0f45658ee26c2e1494440ad0e4135f45a2f7 | exe | ServHelper | |
| 2021-07-08 20:58:06 | c2748f872784ed3b7b9b2c51993d861a5283d3ca17579d367149031b2e479d82 | exe | ServHelper | |
| 2021-07-08 16:45:15 | bc08ed7216a9873ab0f5506692f47f171c94fba244488fc05d1f75c6c169ead9 | exe | ServHelper | |
| 2021-07-08 15:28:11 | b3f483f00e80c0777858e6795f9f13bce726ff8265ef3e8cd3602cf1711247a2 | exe | ServHelper |