URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 200.6.91.43
Firstseen:2023-12-12 23:08:04 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2023-12-12 23:08:07 200.6.91.43Not listedAS270458 FIBRA_MAIS- BRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-28 10:43:10http://200.6.91.43:42290/iOffline32-bit elf mips Mozi ext geenensp
2025-12-28 10:17:16http://200.6.91.43:42290/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-12-17 19:05:08http://200.6.91.43:34832/iOffline32-bit elf mips Mozi ext geenensp
2025-12-17 18:28:19http://200.6.91.43:34832/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-12-02 00:02:08http://200.6.91.43:42339/iOffline32-bit elf mips Mozi ext geenensp
2025-12-01 23:33:09http://200.6.91.43:42339/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-04-10 05:22:05http://200.6.91.43:41201/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-04-09 11:39:05http://200.6.91.43:41201/iOffline32-bit elf mips Mozi ext geenensp
2025-02-03 19:08:04http://200.6.91.43:36033/iOffline32-bit elf mips Mozi ext geenensp
2025-02-03 18:30:05http://200.6.91.43:36033/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-10-11 17:04:06http://200.6.91.43:36751/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2024-09-30 22:45:07http://200.6.91.43:36751/iOffline32-bit elf mips Mozi ext geenensp
2024-09-30 22:12:05http://200.6.91.43:36751/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-08-11 00:05:07http://200.6.91.43:54293/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2024-07-31 22:19:05http://200.6.91.43:54293/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2024-07-28 19:53:05http://200.6.91.43:54293/iOffline32-bit elf mips Mozi ext geenensp
2024-07-28 19:28:05http://200.6.91.43:54293/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-07-15 06:03:07http://200.6.91.43:48478/Mozi.mOfflineMozi ext Gandylyan1
2024-07-07 04:09:07http://200.6.91.43:48478/iOffline32-bit elf mips Mozi ext geenensp
2024-07-07 03:40:13http://200.6.91.43:48478/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-06-25 05:32:06http://200.6.91.43:55932/iOffline32-bit elf mips Mozi ext geenensp
2024-06-25 05:13:08http://200.6.91.43:55932/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-06-23 13:31:11http://200.6.91.43:60070/iOffline32-bit elf mips Mozi ext geenensp
2024-06-23 13:03:07http://200.6.91.43:60070/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-06-22 23:53:05http://200.6.91.43:60070/mozi.mOffline tammeto
2023-12-12 23:23:06http://200.6.91.43:47121/iOffline32-bit elf mips Mozi ext geenensp
2023-12-12 23:08:07http://200.6.91.43:47121/bin.shOffline32-bit elf mips Mozi ext geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-28 10:43:10f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-12-28 10:17:16f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-12-17 19:05:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-12-17 18:28:19f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-12-02 00:02:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-12-01 23:33:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-10 05:22:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-09 11:39:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-02-03 19:08:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-02-03 18:30:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-10-11 17:04:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-09-30 22:45:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-09-30 22:12:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-08-11 00:05:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-31 22:19:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-28 19:53:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-28 19:28:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-15 06:03:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-07 04:09:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-07-07 03:40:13f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-06-25 05:32:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-06-25 05:13:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-06-23 13:31:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-06-23 13:03:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-06-22 23:53:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2023-12-12 23:23:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2023-12-12 23:08:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf