URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-06-15 12:51:31 | 104.165.254.230 | Not listed | AS18779 EGIHOSTING |  US | yes | |
| 2025-06-05 01:48:17 | 172.65.185.109 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-05-13 17:29:11 | 172.65.190.172 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-04-30 20:23:39 | 160.124.171.4 | Not listed | AS132839 POWERLINE-AS-AP |  ZA | no | |
| 2021-08-26 16:35:52 | 154.93.95.239 | Not listed | AS63139 BEDGE-CO-LIMITED |  SC | no | |
| 2021-07-06 12:23:30 | 67.21.83.159 | Not listed | AS46844 SHARKTECH | US | no | |
| 2021-05-31 05:34:22 | 67.21.83.158 | Not listed | AS46844 SHARKTECH | US | no | |
| 2021-02-18 09:08:35 | 106.15.177.228 | Not listed | AS37963 ALIBABA-CN-NET |  CN | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-02-18 09:18:06 | http://zhuoxinwei.com/work.exe | Offline | exe njRAT  |  zbetcheckin |
| 2021-02-18 09:08:35 | http://zhuoxinwei.com/bb.exe | Offline | exe njRAT | zbetcheckin |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-02-18 09:18:05 | e37938245442bf4c1114da250f93cb5cc2fea5c35e50883b819f3c8afc4ab363 | exe | njrat | |
| 2021-02-18 09:08:35 | 8c6407e7d1d82766970510f6b6af283712b63dec81aeba2b3d9286a3baab7bd4 | exe | njrat |