URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 221.159.237.189
Firstseen:2020-09-13 10:26:02 UTC
Total malware sites :31
Online malware sites :0 (0%)
Offline Malware sites :31 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-13 10:26:08 221.159.237.189Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-06-21 15:06:17http://221.159.237.189:19126/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-21 05:37:06http://221.159.237.189:19126/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-19 22:36:06http://221.159.237.189:8622/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-27 10:35:07http://221.159.237.189:51362/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-26 22:49:06http://221.159.237.189:51362/bin.shOffline32-bit arm elf mirai ext geenensp
2021-01-26 10:50:07http://221.159.237.189:51362/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-26 06:56:06http://221.159.237.189:51362/iOffline32-bit arm elf mirai ext geenensp
2020-12-19 12:01:09http://221.159.237.189:10050/bin.shOffline32-bit arm elf mirai ext geenensp
2020-12-18 00:20:08http://221.159.237.189:10050/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-17 20:11:06http://221.159.237.189:10050/iOffline32-bit arm elf mirai ext geenensp
2020-10-21 13:06:07http://221.159.237.189:59003/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-20 20:16:07http://221.159.237.189:59003/iOffline32-bit arm elf mirai ext geenensp
2020-10-20 19:47:07http://221.159.237.189:59003/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-19 09:06:22http://221.159.237.189:59003/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-17 01:35:13http://221.159.237.189:5366/iOffline32-bit arm elf mirai ext geenensp
2020-10-16 19:04:06http://221.159.237.189:5366/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-15 03:51:07http://221.159.237.189:5366/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-09 18:06:11http://221.159.237.189:31899/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-09 07:24:07http://221.159.237.189:31899/iOffline32-bit arm elf mirai ext geenensp
2020-10-08 04:35:08http://221.159.237.189:31899/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-07 11:52:06http://221.159.237.189:46644/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-06 19:50:08http://221.159.237.189:46644/iOffline32-bit arm elf mirai ext geenensp
2020-10-06 19:38:33http://221.159.237.189:46644/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-03 01:52:08http://221.159.237.189:47239/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-02 14:22:07http://221.159.237.189:47239/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-02 08:02:09http://221.159.237.189:47239/iOffline32-bit arm elf mirai ext geenensp
2020-10-02 07:25:08http://221.159.237.189:47239/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-13 12:57:07http://221.159.237.189:2719/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-13 11:37:14http://221.159.237.189:2719/iOffline32-bit arm elf mirai ext geenensp
2020-09-13 11:06:12http://221.159.237.189:2719/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-13 10:26:08http://221.159.237.189:2719/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-06-21 15:06:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-21 05:37:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-19 22:36:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-27 10:35:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-26 22:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-26 10:50:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-26 06:56:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-19 12:01:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-18 00:20:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-17 20:11:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-21 13:06:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-20 20:16:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-20 19:47:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-19 09:06:2212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-17 01:35:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-16 19:04:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-15 03:51:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-09 18:06:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-09 07:24:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-08 04:35:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-07 11:52:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-06 19:50:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-06 19:44:3812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-03 01:52:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-02 14:22:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-02 08:02:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-02 07:25:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-13 12:57:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-13 11:37:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-13 11:06:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-13 10:26:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai