URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 154.216.18.223
Firstseen:2024-08-17 00:51:04 UTC
Total malware sites :28
Online malware sites :0 (0%)
Offline Malware sites :28 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-08-17 00:51:05 154.216.18.223Not listedAS11404 AS-WAVE-1- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-08-28 13:37:06http://154.216.18.223/anon.exeOfflineAmadey exe abus3reports
2024-08-26 16:53:06http://154.216.18.223/Office2024.exeOfflineCoinMiner exe SynapticShaam
2024-08-23 20:59:06http://154.216.18.223/setup2.exeOfflineexe Smoke Loader ext Bitsight
2024-08-17 07:58:04http://154.216.18.223/bins/sora.x86Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:58:03http://154.216.18.223/w.shOfflineshellscript BlinkzSec
2024-08-17 07:58:03http://154.216.18.223/wget.shOfflineshellscript BlinkzSec
2024-08-17 07:58:03http://154.216.18.223/c.shOfflineshellscript BlinkzSec
2024-08-17 07:57:08http://154.216.18.223/sh4Offlineelf ua-wget BlinkzSec
2024-08-17 07:57:07http://154.216.18.223/bins/sora.m68kOfflineelf ua-wget BlinkzSec
2024-08-17 07:57:07http://154.216.18.223/bins/sora.sh4Offlineelf ua-wget BlinkzSec
2024-08-17 07:57:07http://154.216.18.223/arm6Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:07http://154.216.18.223/mpslOfflineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:06http://154.216.18.223/bins/sora.mipsOfflineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:06http://154.216.18.223/bins/sora.armOfflineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/ppcOfflineelf ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/m68kOfflineelf ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/arm5Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.arm6Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/arm7Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.spcOfflineelf ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.mpslOfflineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.arm7Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/spcOfflineelf ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.arm5Offlineelf mirai ext ua-wget BlinkzSec
2024-08-17 07:57:05http://154.216.18.223/bins/sora.ppcOfflineelf ua-wget BlinkzSec
2024-08-17 00:51:05http://154.216.18.223/x86Offline32-bit elf mirai ext threatquery
2024-08-17 00:51:05http://154.216.18.223/mipsOffline32-bit elf mirai ext threatquery
2024-08-17 00:51:05http://154.216.18.223/armOffline32-bit elf mirai ext threatquery

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-08-28 13:37:06ea4964f3eccefd735166a547f6fed7a123a292fab52f9a810936ccaabce8eaa9exe Amadey
2024-08-26 16:53:06bc7d010eb971dbc9cbeedc543f93bb1b6924d57597e213dbe10c2c1efd8d0296exe CoinMiner
2024-08-23 20:59:0641582c8b6bd111a2f141dee52b619d13278ef68754691263abeb3238d485f404exeSmoke Loader
2024-08-19 14:44:237695b24da5606a5f8f56c6eb5de5da41ad06418022c1017f053847f86dfbd79felf  
2024-08-19 14:40:25cebc66e77731a45823fdba350db03b68986b3f514f9f8f7c0b812dd380897d15elf  
2024-08-19 14:28:30427540e358ea99b72cdb63f83a0d115d10aa4401129df6b9f8c200ddd424ae16elf  
2024-08-19 14:26:52ad8e3755384a4d438862ffc907e69d444fe1894f073a32807c203544bafcf833elf  
2024-08-19 14:18:17cf5ea9e2a775cc4033ffb0c2bf3f675a3ebf357b1974be6afb33c7de1c2d8225elf  
2024-08-19 13:55:066c29af8a43a9265e43e9c107ccd50756335d470bc279c3c2764526d88b52ce4celf  
2024-08-19 13:36:47b90b7ae5363fa31a658e2a955e506a1dfd7cf5bc4304fde41534c2b50ad70903elf  
2024-08-19 13:36:11150aff498fa0ce69c35867231a36c5d9f26980bfc33b0c2e73e6877afa0fc0e3elf  
2024-08-19 12:14:13c54f153b483b8cedf6b077f04954a3cf3a6214f33c458ce674c298af045c0114elf  
2024-08-19 11:57:59f4a30e13304804a4fba9cba48de318a2653d8cb9f19a09137ed2a6e6bf6183a0elf  
2024-08-19 11:00:102c0d93f5b488e5de08e2a69fa886d1128bd894ad5eb48a1b2d19be4e072f2bd3elf  
2024-08-17 07:58:042913de3bd0659188eae3473c49976279f378bc355189098b43f065103fc6d220elfMirai
2024-08-17 07:57:08a11c877a791aa1409293ac1a8215a12bc6fd5ac2eac1fe9e08f1eafe74b17e83elf  
2024-08-17 07:57:07e889929155a71aa068413716d3dc3c453ed54819837cd9c03291f67f21039a68elf  
2024-08-17 07:57:07a11c877a791aa1409293ac1a8215a12bc6fd5ac2eac1fe9e08f1eafe74b17e83elf  
2024-08-17 07:57:07c285bf6e4bb51d12a3946dc026ba92d449c363d9509be8350c4cc4aa19947f8aelfMirai
2024-08-17 07:57:072e1bbe25c97fc8061697fce4b43fccafaebb4898cb20448921fb4c9d2f522809elfMirai
2024-08-17 07:57:0619a5e246f5849a85a9d519692fabb97eb6503fcb35486c1eff4cf1da13461680elfMirai
2024-08-17 07:57:06b9a5fe221e2d95797cd7fe6156b9c1c92dae9439c5e60406c7735d612ffa7f31elfMirai
2024-08-17 07:57:05e889929155a71aa068413716d3dc3c453ed54819837cd9c03291f67f21039a68elf  
2024-08-17 07:57:05cd45565f78c9a51b5a1c58ebe685dfe32bf934393d2571471259e4886bf518f7elf  
2024-08-17 07:57:05145d2e0e636c3b6d3981a9aebc05d4a6406e9f5f1f939f9dc4c7fee48a042b1celfMirai
2024-08-17 07:57:05c285bf6e4bb51d12a3946dc026ba92d449c363d9509be8350c4cc4aa19947f8aelfMirai
2024-08-17 07:57:05fb8e9058f3eabff39fd3223f987d53383a8fe3205301c65f5ccd8c3734961b33elfMirai
2024-08-17 07:57:05de6242c6df8d4f1d244308977e5a53643cb24eee02821626b631353c90662411elf  
2024-08-17 07:57:052e1bbe25c97fc8061697fce4b43fccafaebb4898cb20448921fb4c9d2f522809elfMirai
2024-08-17 07:57:05fb8e9058f3eabff39fd3223f987d53383a8fe3205301c65f5ccd8c3734961b33elfMirai
2024-08-17 07:57:05de6242c6df8d4f1d244308977e5a53643cb24eee02821626b631353c90662411elf  
2024-08-17 07:57:05145d2e0e636c3b6d3981a9aebc05d4a6406e9f5f1f939f9dc4c7fee48a042b1celfMirai
2024-08-17 07:57:05cd45565f78c9a51b5a1c58ebe685dfe32bf934393d2571471259e4886bf518f7elf  
2024-08-17 00:51:052913de3bd0659188eae3473c49976279f378bc355189098b43f065103fc6d220elfMirai
2024-08-17 00:51:0519a5e246f5849a85a9d519692fabb97eb6503fcb35486c1eff4cf1da13461680elfMirai
2024-08-17 00:51:05b9a5fe221e2d95797cd7fe6156b9c1c92dae9439c5e60406c7735d612ffa7f31elfMirai