URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-30 21:54:26 | 34.197.189.238 | ec2-34-197-189-238.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-04-28 07:30:25 | 54.197.144.158 | ec2-54-197-144-158.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2020-01-15 04:14:06 | 190.8.176.186 | kvm-eliu.colombiahosting.com.co | Not listed | AS36454 WHG-DAL | US | no |
| 2025-04-29 16:03:19 | 18.211.16.107 | ec2-18-211-16-107.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-05-03 00:19:25 | 44.196.181.87 | ec2-44-196-181-87.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2025-05-03 00:19:25 | 52.72.148.85 | ec2-52-72-148-85.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2025-04-28 07:30:25 | 54.164.197.246 | ec2-54-164-197-246.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-01-22 21:18:06 | http://www.tecal.co/media/balance/b82az6gggwh4/ | Offline | doc emotet | |
| 2020-01-17 04:39:03 | http://www.tecal.co/media/Overview/upb-96129001... | Offline | doc emotet | |
| 2020-01-15 04:14:06 | http://www.tecal.co/media/private_zone/special_... | Offline | doc emotet |
The table below shows recent payloads delivery by this host.
US