############################################################################## # URLhaus ASN CSV Feed # # Generated on 2026-09-01 06:03:01 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS21769 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2026-08-31 17:00:06","http://206.206.78.39/index.ps1","offline","malware_download","206-206-78-39|DEU|geofenced|powershell|ua-wget","206.206.78.39","206.206.78.39","21769","SG" "2026-04-16 10:30:12","http://85.208.9.62/bins/pppc","offline","malware_download","85-208-9-62|elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 10:30:12","http://85.208.9.62/bins/px86_64","offline","malware_download","85-208-9-62|elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:02:18","http://85.208.9.62/bins/parm7","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:01:10","http://85.208.9.62/bins/pmips","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:01:10","http://85.208.9.62/bins/psh4","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:23","http://85.208.9.62/bins/parm","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:22","http://85.208.9.62/bins/parm5","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:22","http://85.208.9.62/bins/parm6","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:22","http://85.208.9.62/bins/pm68k","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:22","http://85.208.9.62/bins/pmpsl","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-16 03:00:22","http://85.208.9.62/bins/px86","offline","malware_download","elf|Mirai|ua-wget","85.208.9.62","85.208.9.62","21769","NL" "2026-04-14 19:28:18","http://184.174.20.150:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=bat&c=&c=&c=&c=&c=&c=&c=","online","malware_download","ConnectWise","184.174.20.150","184.174.20.150","21769","US" "2026-02-20 17:00:22","http://173.211.70.196:443/02.08.2022.exe","offline","malware_download","censys|CobaltStrike","173.211.70.196","173.211.70.196","21769","US" "2025-12-11 18:47:16","http://206.206.78.157/02.08.2022.exe","offline","malware_download","censys|CobaltStrike","206.206.78.157","206.206.78.157","21769","SG" "2025-08-26 13:23:08","http://103.63.28.71:2024/getz","offline","malware_download","","103.63.28.71","103.63.28.71","21769","US" "2025-07-15 14:38:35","http://206.206.78.129/j/a6le0","offline","malware_download","ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:27:06","http://206.206.78.129/x/vigor","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:10","http://206.206.78.129/busybox-armv7l","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:10","http://206.206.78.129/busybox-i486","offline","malware_download","censys|elf|Mirai|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:10","http://206.206.78.129/busybox-mips","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:10","http://206.206.78.129/busybox-mipsel","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:10","http://206.206.78.129/busybox-x86_64","offline","malware_download","censys|elf|Mirai|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:09","http://206.206.78.129/busybox-i586","offline","malware_download","censys|elf|Mirai|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:25:09","http://206.206.78.129/udparm","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 15:22:12","http://206.206.78.129/mipselshell","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 14:51:15","http://206.206.78.129/udpmips","offline","malware_download","censys|elf|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 14:51:10","http://206.206.78.129/shell","offline","malware_download","censys|sh|ua-wget","206.206.78.129","206.206.78.129","21769","SG" "2025-07-14 06:52:04","http://85.208.9.68/hiddenbin/Demon.mips64","offline","malware_download","elf|ua-wget","85.208.9.68","85.208.9.68","21769","NL" "2025-07-14 06:52:04","http://85.208.9.68/hiddenbin/Demon.sparc","offline","malware_download","elf|ua-wget","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:12","http://85.208.9.68/hiddenbin/Demon.x86","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:12","http://85.208.9.68/hiddenbin/Demon.x86_64","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:11","http://85.208.9.68/hiddenbin/Demon.arc","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:11","http://85.208.9.68/hiddenbin/Demon.arm7","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:11","http://85.208.9.68/hiddenbin/Demon.m68k","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:11","http://85.208.9.68/hiddenbin/Demon.mpsl","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:10","http://85.208.9.68/hiddenbin/Demon.i686","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:08","http://85.208.9.68/hiddenbin/Demon.arm","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:08","http://85.208.9.68/hiddenbin/Demon.arm5","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:08","http://85.208.9.68/hiddenbin/Demon.spc","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:07","http://85.208.9.68/1.sh","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:07","http://85.208.9.68/hiddenbin/Demon.arm6","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:07","http://85.208.9.68/hiddenbin/Demon.mips","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:07","http://85.208.9.68/hiddenbin/Demon.ppc","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-07-13 22:51:07","http://85.208.9.68/hiddenbin/Demon.sh4","offline","malware_download","mirai|opendir","85.208.9.68","85.208.9.68","21769","NL" "2025-06-30 00:36:05","http://85.208.9.171/bins/x86","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:35:06","http://85.208.9.171/bins/m68k","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:34:13","http://85.208.9.171/bins/spc","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:34:12","http://85.208.9.171/bins/ppc","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:34:08","http://85.208.9.171/bins/mpsl","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:34:07","http://85.208.9.171/bins/arm6","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-06-30 00:33:08","http://85.208.9.171/bins/sh4","offline","malware_download","elf|Mirai|ua-wget","85.208.9.171","85.208.9.171","21769","NL" "2025-03-05 18:21:31","http://event-cpd.com/mips.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 18:21:25","http://event-cpd.com/sh4.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:19:18","http://event-cpd.com/mipsel.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:19:07","http://event-cpd.com/m68k.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:19:07","http://event-cpd.com/powerpc.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:19:06","http://event-cpd.com/x86_64.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:19:02","http://event-cpd.com/arm5.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:18:33","http://event-cpd.com/arm6.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:18:31","http://event-cpd.com/sparc.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:18:27","http://event-cpd.com/x86_32.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:18:20","http://event-cpd.com/arm7.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-03-05 14:08:37","http://event-cpd.com/arm.nn","offline","malware_download","elf|geofenced|GorillaBotnet|Mirai|ua-wget|USA","event-cpd.com","216.122.166.142","21769","US" "2025-02-12 19:00:06","https://216.107.136.186/check-it/report","offline","malware_download","Emmenhtal|hta","216.107.136.186","216.107.136.186","21769","US" "2024-10-10 23:08:23","http://67.203.7.163:1244/pdown","offline","malware_download","BeaverTail|Lazarus|py|StrelaStealer|zip","67.203.7.163","67.203.7.163","21769","US" "2024-09-22 18:59:10","http://206.206.76.183/wconfig.json","offline","malware_download","CoinMiner|config|json","206.206.76.183","206.206.76.183","21769","SG" "2024-09-22 18:59:09","http://206.206.76.183/xmrig.exe","offline","malware_download","CoinMiner|exe|XMRig","206.206.76.183","206.206.76.183","21769","SG" "2024-06-11 19:05:10","http://67.207.166.175/xampp/gts/BrowserUpdate.hta","offline","malware_download","CobaltStrike|hta","67.207.166.175","67.207.166.175","21769","US" "2024-06-07 03:49:05","http://67.207.166.175/M0306T/lsass.exe","offline","malware_download","32|exe|PureCrypter","67.207.166.175","67.207.166.175","21769","US" "2024-06-06 14:59:06","http://67.207.166.175/T0406W/lsass.exe","offline","malware_download","exe|opendir|PureCrypter|PureLogStealer","67.207.166.175","67.207.166.175","21769","US" "2024-06-06 14:58:07","http://67.207.166.175/xampp/gbh/lionsarekingogthejunglewhorulestheentireforestandlionsgreattounderstandtheyaregreattoundersetandlionsarekindofthejungle__lionsarekingofjungle.doc","offline","malware_download","doc|PureCrypter|PureLogStealer","67.207.166.175","67.207.166.175","21769","US" "2024-04-30 10:30:18","http://67.203.7.154/uigcLHxYEyYHi246.bin","offline","malware_download","","67.203.7.154","67.203.7.154","21769","US" "2023-12-01 05:52:19","http://45.40.96.169:4411/tl30.zip","offline","malware_download","BRA|GEO|grandoreiro|payload","45.40.96.169","45.40.96.169","21769","US" "2023-01-10 16:19:38","http://208.76.253.84/ga.exe","offline","malware_download","exe","208.76.253.84","208.76.253.84","21769","US" "2022-10-26 08:35:09","http://103.84.212.205:36356/Mozi.m","offline","malware_download","elf|Mozi","103.84.212.205","103.84.212.205","21769","US" "2021-12-22 17:59:06","http://103.41.45.138:46746/i","offline","malware_download","32-bit|ELF|MIPS|Mozi","103.41.45.138","103.41.45.138","21769","US" "2021-12-01 07:28:09","http://360sma.com/M9n/tBKTAnq/","offline","malware_download","emotet|epoch4|redir-appinstaller","360sma.com","216.183.246.221","21769","US" "2021-12-01 01:00:09","http://360sma.com/M9n/tBKTAnq","offline","malware_download","emotet|epoch4|redir-appinstaller","360sma.com","216.183.246.221","21769","US" "2021-11-30 04:51:17","http://marymotherofmercyivf.com/perspiciatisprovident/similiqueet-149849329","offline","malware_download","chaserldr|Qakbot|TR|zip","marymotherofmercyivf.com","173.214.176.25","21769","US" "2021-10-19 16:47:10","https://marymotherofmercyivf.com/perspiciatisprovident/documents.zip","offline","malware_download","TR|zip","marymotherofmercyivf.com","173.214.176.25","21769","US" "2021-06-30 04:04:09","http://103.71.61.45:50942/Mozi.m","offline","malware_download","elf|Mirai|Mozi","103.71.61.45","103.71.61.45","21769","US" "2021-06-24 16:23:33","http://alpharettaagency.com/fugitive.php","offline","malware_download","","alpharettaagency.com","216.183.246.221","21769","US" "2021-06-24 16:23:06","http://alpharettaagency.com/phrenology.php","offline","malware_download","doc|hancitor|html","alpharettaagency.com","216.183.246.221","21769","US" "2021-06-24 07:34:16","http://103.71.61.45:43860/Mozi.m","offline","malware_download","elf|Mirai|Mozi","103.71.61.45","103.71.61.45","21769","US" "2021-05-11 11:19:19","http://103.108.97.51:49676/Mozi.m","offline","malware_download","elf|Mirai|Mozi","103.108.97.51","103.108.97.51","21769","US" "2021-02-21 19:36:04","http://89.106.15.39:58215/i","offline","malware_download","32-bit|ELF|MIPS","89.106.15.39","89.106.15.39","21769","US" "2021-02-13 22:43:04","http://89.106.15.39:40875/bin.sh","offline","malware_download","32-bit|ELF|MIPS","89.106.15.39","89.106.15.39","21769","US" "2021-02-12 10:38:03","http://89.106.15.39:40875/i","offline","malware_download","32-bit|ELF|MIPS","89.106.15.39","89.106.15.39","21769","US" "2020-12-09 12:33:07","https://360sma.com/huh0uf.zip","offline","malware_download","dll|Dridex","360sma.com","216.183.246.221","21769","US" "2020-12-02 18:13:03","http://89.106.15.39:55893/bin.sh","offline","malware_download","32-bit|ELF|MIPS","89.106.15.39","89.106.15.39","21769","US" "2020-12-01 09:29:05","http://89.106.15.39:55893/i","offline","malware_download","32-bit|ELF|MIPS","89.106.15.39","89.106.15.39","21769","US" "2020-09-28 19:04:04","http://103.41.47.192:42384/Mozi.m","offline","malware_download","elf|Mozi","103.41.47.192","103.41.47.192","21769","US" "2020-09-16 20:04:08","http://103.41.47.192:42115/Mozi.m","offline","malware_download","elf|Mozi","103.41.47.192","103.41.47.192","21769","US" "2020-09-10 14:49:04","http://103.41.47.192:48567/Mozi.a","offline","malware_download","elf|Mozi","103.41.47.192","103.41.47.192","21769","US" "2019-10-06 06:13:59","http://103.102.133.33:46292/.i","offline","malware_download","elf|hajime","103.102.133.33","103.102.133.33","21769","US" "2018-12-06 21:51:05","http://173.46.85.239:4560/aza.msi","offline","malware_download","msi","173.46.85.239","173.46.85.239","21769","US" "2018-12-04 17:20:06","http://173.46.85.239:4560/k900.msi","offline","malware_download","Lokibot","173.46.85.239","173.46.85.239","21769","US" "2018-11-30 21:20:04","http://173.46.85.239:4560/press.exe","offline","malware_download","exe|Pony","173.46.85.239","173.46.85.239","21769","US" "2018-11-30 09:09:15","http://173.46.85.239:4560/fis2.exe","offline","malware_download","exe|Pony","173.46.85.239","173.46.85.239","21769","US" "2018-11-30 09:09:13","http://173.46.85.239:4560/metu.exe","offline","malware_download","exe|Pony","173.46.85.239","173.46.85.239","21769","US" "2018-11-29 19:26:36","http://173.46.85.239:4560/kate.exe","offline","malware_download","exe|Loki","173.46.85.239","173.46.85.239","21769","US" "2018-11-22 17:14:03","http://zp1.duckdns.org:6060/pr.jar","offline","malware_download","adwind|jar","zp1.duckdns.org","173.46.85.179","21769","US" # of entries: 103