URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-12-20 21:36:35	187.26.12.66	187-26-12-66.3g.claro.net.br	Not listed	AS22085 Claro_S/A	BR	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-12-20 21:36:35	http://187.26.12.66:55748/Mozi.m	Offline	elf Mozi	lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-12-22 16:30:12	8a43d52c687c285bf0be7fd872cfa014c4449c43dfb13b8a07465d6b1f396a21	elf
2020-12-22 15:23:09	90ca915cef20aeddb431bcd57f9eff7411673d18cf660a089577d3cc61cd9ffa	elf
2020-12-21 13:42:18	6fca4f9ac859c5fe4f3dbe5a324c10d251288bf80fe0c0e0e93e271ad8392029	elf
2020-12-21 13:08:58	5c7d5b43ce2b2d05f6630fdaa27d8f4d50205b31a428e946c0b7f97b99b5ab70	elf
2020-12-21 12:41:37	d9ed62952c82fb610440f956cf261273f9fc15c62ae303940a25e2dd3bdc20da	elf
2020-12-21 01:23:59	5e92c10fb3f58574c2a88273798e101eb9fb9f4ec559c156e1a352ce2d376766	elf
2020-12-21 00:52:38	48df1f1a73979112c713aaa09935c660377a06f2608edf9d2d3d314245345fb1	elf
2020-12-21 00:43:34	4eb9f48c36279e0730598a10d01a5e97f23c1a8e67fc54e83e6b9ecb012fd891	elf
2020-12-21 00:10:44	5c1191f6c1d26b8a97c8c3e0b2943e9bfc9d65dcc4515b4b5f4970a9a51fe790	elf
2020-12-20 21:36:34	f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8	elf