URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-06-14 12:55:58 | 104.165.254.230 | Not listed | AS18779 EGIHOSTING |  US | yes | |
| 2025-06-05 05:00:54 | 172.65.185.109 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-05-12 17:36:34 | 172.65.190.172 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-04-27 18:42:43 | 160.124.171.4 | Not listed | AS132839 POWERLINE-AS-AP |  ZA | no | |
| 2021-08-26 11:04:37 | 154.93.95.239 | Not listed | AS63139 BEDGE-CO-LIMITED |  SC | no | |
| 2021-07-06 15:47:50 | 67.21.83.159 | Not listed | AS46844 SHARKTECH | US | no | |
| 2021-05-31 05:36:09 | 67.21.83.158 | Not listed | AS46844 SHARKTECH | US | no | |
| 2021-02-16 14:06:07 | 106.15.177.228 | Not listed | AS37963 ALIBABA-CN-NET |  CN | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-02-18 06:27:04 | http://www.zhuoxinwei.com/bb.exe | Offline | exe njRAT  rat |  abuse_ch |
| 2021-02-16 14:06:07 | http://www.zhuoxinwei.com/work.exe | Offline | AveMariaRAT exe njRAT rat | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-02-22 15:22:34 | 0a5597d355618ad54b9fe5a4174d3d18e830cfbe6fdfa41b906a5ac3429db851 | exe | njrat | |
| 2021-02-18 06:27:04 | 8c6407e7d1d82766970510f6b6af283712b63dec81aeba2b3d9286a3baab7bd4 | exe | njrat | |
| 2021-02-17 18:04:59 | 94bfa8c9f21aecceb10954cefcfb8089a87f213d5642bfd9f9b3b20c4d35c80d | exe | ||
| 2021-02-17 17:32:34 | e37938245442bf4c1114da250f93cb5cc2fea5c35e50883b819f3c8afc4ab363 | exe | njrat | |
| 2021-02-17 17:03:09 | caf2426860f30acfd54896fffbbd9c0287aea7f7dc5e51ead591381aedcd31d4 | exe | AveMariaRAT | |
| 2021-02-17 14:36:16 | a2f25508bf1afda77068376b2ff8418e18a089bf2dfa31df58bf3428eb8b5477 | exe | AveMariaRAT | |
| 2021-02-17 01:23:19 | da2f28066626c5233467f5cffeba4c770bb1e2d4a0ab70d11dde42051ab4a547 | exe | njrat | |
| 2021-02-17 01:00:34 | 48b29379fd85a693a02194e85bc1e465bbe75215d24d2a7d564dedbe31b02aed | exe | njrat | |
| 2021-02-16 14:06:06 | 34931da71c14d251f6a43f21ef98c4b67bf17535d7164f154bc6206625363140 | exe | njrat |