URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	143.20.37.154
Firstseen:	2025-12-18 21:13:22 UTC
Total malware sites :	13
Online malware sites :	0 (0%)
Offline Malware sites :	13 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-12-18 21:13:26	143.20.37.154		Not listed	AS215703 FREAKHOSTING	DE	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-12-19 07:08:15	http://143.20.37.154/xpi686	Offline	elf ua-wget	abuse_ch
2025-12-19 07:08:15	http://143.20.37.154/xpsparc	Offline	elf ua-wget	abuse_ch
2025-12-19 07:08:15	http://143.20.37.154/xpi586	Offline	elf ua-wget	abuse_ch
2025-12-19 07:08:15	http://143.20.37.154/xparc	Offline	elf ua-wget	abuse_ch
2025-12-18 21:15:13	http://143.20.37.154/xpx86	Offline	elf geofenced mirai ua-wget USA x86	botnetkiller
2025-12-18 21:14:22	http://143.20.37.154/b.sh	Offline	geofenced mirai sh ua-wget USA	botnetkiller
2025-12-18 21:14:22	http://143.20.37.154/xparm	Offline	arm elf geofenced mirai ua-wget USA	botnetkiller
2025-12-18 21:14:22	http://143.20.37.154/xpsh4	Offline	elf geofenced mirai SuperH ua-wget USA	botnetkiller
2025-12-18 21:14:22	http://143.20.37.154/xparm7	Offline	arm elf geofenced mirai ua-wget USA	botnetkiller
2025-12-18 21:14:22	http://143.20.37.154/xparm6	Offline	arm elf geofenced mirai ua-wget USA	botnetkiller
2025-12-18 21:13:26	http://143.20.37.154/xpmips	Offline	elf geofenced mips mirai ua-wget USA	botnetkiller
2025-12-18 21:13:26	http://143.20.37.154/xparm5	Offline	arm elf geofenced mirai ua-wget USA	botnetkiller
2025-12-18 21:13:26	http://143.20.37.154/xpmpsl	Offline	elf geofenced mips mirai ua-wget USA	botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2025-12-18 21:15:13	a76639e5ec05e6394636795bb2873c0127b0aa340d9f0f0067377263008d9dad	elf	Mirai
2025-12-18 21:14:22	0f4570f98ddcbaa032069fcb94608143078eab427008519169c32d8662563bc0	sh	Mirai
2025-12-18 21:14:22	0580273c3f41f5025401e4836e4eaab1fda97f11b92a9ed215aef432e8151ec9	elf	Mirai
2025-12-18 21:14:22	b1fc3796b8cb3d426fc74e6d9f06637ab1643f071283dd63ac8a1ce5a26f0834	elf	Mirai
2025-12-18 21:14:22	9c2c71084ec60f3df3fb5593d171e415af377298eff7f4bc4475be22cddbab25	elf	Mirai
2025-12-18 21:14:22	07ae848cc5ba570446b2e3e1ec560c6bb7f05e810a84a77a71f19c3f43270d65	elf	Mirai
2025-12-18 21:13:26	2b63ef456fbcfaa61cac464fd974a01fc3e8c77f378ae83bcaa52b66e5f3db0c	elf	Mirai
2025-12-18 21:13:26	249bc7c5f69ca45551a7b7c35076a8a63b9c6de3d5228ca3006bd92583351fcf	elf	Mirai
2025-12-18 21:13:26	7ef1315c3e6667d670dfc11e07302c845b41f1e4643a0ca4c42e0d5390ad5080	elf	Mirai