URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 107.189.12.195
Firstseen:2022-01-16 17:33:03 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-01-16 17:33:04 107.189.12.195Not listedAS53667 PONYNET- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-02-07 13:34:03http://107.189.12.195//MipsOfflineddos elf Gandylyan1
2022-02-02 09:19:04http://107.189.12.195//sysOfflineBillGates ddos elf Gandylyan1
2022-01-31 21:01:03http://107.189.12.195/wormr.exeOffline32 exe zbetcheckin
2022-01-31 21:00:05http://107.189.12.195/LinuxOffline32 ddos.tf elf intel zbetcheckin
2022-01-31 20:10:04http://107.189.12.195/svcyr.exeOfflineddos exe trojan Gandylyan1
2022-01-29 14:14:03http://107.189.12.195//ARM6Offlineddos ddos.tf trojan Gandylyan1
2022-01-29 14:13:04http://107.189.12.195//ARMOfflineddos ddos.tf trojan Gandylyan1
2022-01-27 12:07:04http://107.189.12.195/arm6?ddosOfflineddos elf mirai ext Gandylyan1
2022-01-26 11:06:04http://107.189.12.195/arm?ddosOfflineddos elf mirai ext Gandylyan1
2022-01-25 10:16:03http://107.189.12.195/x86?ddosOfflineddos elf mirai ext Gandylyan1
2022-01-21 11:28:03http://107.189.12.195/mips?ddosOfflineddos elf mirai ext Gandylyan1
2022-01-20 11:49:03http://107.189.12.195/arm5?ddosOfflineddos elf mirai ext Gandylyan1
2022-01-19 09:57:04http://107.189.12.195//mpslOfflineddos elf mirai ext Gandylyan1
2022-01-18 14:28:04http://107.189.12.195/spcOffline32 elf mirai ext sparc zbetcheckin
2022-01-18 14:17:05http://107.189.12.195/sh4Offline32 elf mirai ext renesas zbetcheckin
2022-01-18 14:16:05http://107.189.12.195/sysOffline32 BillGates elf intel zbetcheckin
2022-01-18 14:09:05http://107.189.12.195/ARM1Offline32 arm elf zbetcheckin
2022-01-18 14:09:04http://107.189.12.195/ppcOffline32 elf mirai ext PowerPC zbetcheckin
2022-01-18 14:09:04http://107.189.12.195/m68kOffline32 elf mirai ext motorola zbetcheckin
2022-01-18 14:09:04http://107.189.12.195/wget.shOfflineshellscript zbetcheckin
2022-01-18 12:25:04http://107.189.12.195/arm7OfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-17 09:52:04http://107.189.12.195/arm6OfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-16 17:33:05http://107.189.12.195/mipsOfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-16 17:33:05http://107.189.12.195/armOfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-16 17:33:05http://107.189.12.195/x86OfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-16 17:33:04http://107.189.12.195/arm5OfflineDDoS Bot elf mirai ext Gandylyan1
2022-01-16 17:33:04http://107.189.12.195/mpslOfflineDDoS Bot elf mirai ext Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-02-09 11:14:46a6a662c24c5bd86a65db3fda3862217891b4e3d732b1df2c14de7c95fa4b0ef8elf 
2022-02-09 04:26:20cce0f1b57c07e61203ee1a6ef435c1a6cbbba26ef92a9867d79a286c0ed32409unknown  
2022-02-09 03:41:3671fea9ad87e6d1b3bfd94dd7963c5b40b5af2695ea3620a65a00000e839b4046unknown  
2022-02-09 02:41:2285dc3a96d3b88f4a9139fdef62ef1b989162706f1b3330b8a55d4234fccd8bdcelf  
2022-02-09 02:33:102758b7cc6558a79c25088a2950d8edc70fa26c8a52e46b8aab3424862535e85felf  
2022-02-09 02:23:14c9f548d0c1bfd41e86a3a2a691479eb2220c630ad57d9969e572b45ee9cf0a59elf  
2022-02-08 16:24:5377ac5dae1c7f2f8f4f9fd672ad60a7074bc349795a79b4a3a79a445170f34c9cunknown  
2022-02-07 13:34:03a6a662c24c5bd86a65db3fda3862217891b4e3d732b1df2c14de7c95fa4b0ef8elf 
2022-02-06 15:54:0718af8753485d6fae12e9b13dcc42ff491a92acd77cb23c294307583d2bc73561unknown  
2022-02-05 16:56:21d2c3ec2fddf866166736072aa7d9ea9dffb556de024b2e1aeebdd72eb946555delf 
2022-02-05 16:55:201b5b10c9f66a7ccb759e143782659dc7b7e1f938e3d5e4c3ee14cc5360353a2celf  
2022-02-05 16:55:0149e11014e7243d070e297d064a1f234ace2d28db7d8ef1f64f2cd62f077d7480elf  
2022-02-05 02:52:27eb9b2873d8425cbc591e114cf95de3d501c030d76128c6178f0805e944ed728celf  
2022-02-05 02:51:5091dca1c8444cbb0a27a12130c7bfd2d4b72e9676c1f00539ec2b2dce6330f091elf  
2022-02-05 02:51:24381cabc22a4b989404c733bf226971b93babfc047e23cdd0bd68812143099c17elf  
2022-02-05 02:37:153df2fb031eca15e8a0fd69d94aa8b2d6225d5633136a54f59e6d1d41c66ca52aexe  
2022-02-05 01:59:31f9421b8b1a985300edb67ad96415a55ab70186575d26ac43584b76981783476aexe  
2022-02-04 15:53:38f3451356b893109e502db28af41b1d8720f0d0d5ee547e46484bb2302428b33felf  
2022-02-04 15:53:3878a527228c026d6885518d97214a2702a0f42f6309f1ecc1ddf7d1c35fd1228aelf  
2022-02-04 15:36:5392ce3ddd6dd3ab39ee984d64f108073ac162a42e689f07d6a5fe99c1728b3b60elf  
2022-02-02 09:19:04d222b8c28cd75dd2c9d343868489ca3ffb4205f543c6a0a38c43ed5abe9792daelfBillGates
2022-01-31 21:01:03d1539a74f2278ae13e6b7d7dfa38a8d0bbf2acdc142ef9e615ed8f52d1e0cfa4exe 
2022-01-31 21:00:052efef0986635f9c2c6985a72c0aafd41194a9604a7cdffc9c15d833d884e9379elfDDoS.TF
2022-01-31 20:10:04c9fc78840dc8310cfadfc2432522509dc2af91aa0a91241b34bdbe55bc703a5aexe 
2022-01-29 14:14:034e16b0c8b551555ffa22b80654c49076993697eeb9d7871eb9dbf45f77d81e93elfDDoS.TF
2022-01-29 14:13:04025cf3a902bf55911a0234599a73e0a95ca635cfb5c2b30475933064eed67e2felfDDoS.TF
2022-01-28 11:25:50d222b8c28cd75dd2c9d343868489ca3ffb4205f543c6a0a38c43ed5abe9792daelfBillGates
2022-01-27 13:48:200ac1fd536dfcc221822d9e72442101ca9ba6d1419562f13a880960713ab5fc8cunknown  
2022-01-27 13:23:20b590bdb2861fca7d63518eef3fac0ea924bf8e409da29914b57dc649722dcfcbunknown  
2022-01-27 12:07:04e1dcddb44dc9128ca67c6ac4da995f9ce287e593183a5149138b149a2106d16delfMirai
2022-01-26 11:06:04d2c3ec2fddf866166736072aa7d9ea9dffb556de024b2e1aeebdd72eb946555delf 
2022-01-25 10:16:03ae3f0819d033e92758c71a36bd71ef08c979be3f525d908aad306d58d0c8f304elfMirai
2022-01-21 11:28:031f523135834f10921ba46664af37bfd48d9e9f86ca064f6a065e1a5cc76c3e02elfMirai
2022-01-20 11:49:034652766b871f0e0b2228b84abed9af491bd8fd057a49c460579325d0ab6f3a22elfMirai
2022-01-19 09:57:038db937bd6a3a28e06970556d59415b33d83fe02de74fbf20ca4f802a2ca52bbbelfMirai
2022-01-18 14:28:0467c374c0127e28db60e1583bc03bae6b27d37c8b5e3ea5c7226193ff122a00c7elfMirai
2022-01-18 14:17:045b9493d339343fee0ac54f3c1c89e599704828dff0a23412e1d8e293c0ca9888elfMirai
2022-01-18 14:16:05ef25e5a8a35482a1dde914a60a9239c2ba3dd2dbd287af7791430c394d46160aelf  
2022-01-18 14:09:05d2c3ec2fddf866166736072aa7d9ea9dffb556de024b2e1aeebdd72eb946555delf 
2022-01-18 14:09:041ff0204a95688d461dbc4119a9e489b2f78e852bcd047e5c716c69016a61dbceelfMirai
2022-01-18 14:09:040a0a3c31bfa75d76c23ba6eef15f8a21919b87e2585a28254a46426c17dd29c8elfMirai
2022-01-18 14:09:04226121281d09352c2c2d2dd8f3cb7dbd81ca9c98d8faacbaa93d3c983f332276unknown  
2022-01-18 12:25:04983cff38baabadcf0e33a1cf09fb5c269262eabfb38b9a6e7db7a44b32976c9delfMirai
2022-01-17 09:52:04e1dcddb44dc9128ca67c6ac4da995f9ce287e593183a5149138b149a2106d16delfMirai
2022-01-16 17:33:051f523135834f10921ba46664af37bfd48d9e9f86ca064f6a065e1a5cc76c3e02elfMirai
2022-01-16 17:33:05d2c3ec2fddf866166736072aa7d9ea9dffb556de024b2e1aeebdd72eb946555delf 
2022-01-16 17:33:05ae3f0819d033e92758c71a36bd71ef08c979be3f525d908aad306d58d0c8f304elfMirai
2022-01-16 17:33:044652766b871f0e0b2228b84abed9af491bd8fd057a49c460579325d0ab6f3a22elfMirai
2022-01-16 17:33:048db937bd6a3a28e06970556d59415b33d83fe02de74fbf20ca4f802a2ca52bbbelfMirai