URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 32589.clmonth.nyashteam.ru |
|---|---|
| Spamhaus DBL : | Not blocked |
| SURBL : | Not blocked |
| Quad9 : | Status unknown |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Status unknown |
| OpenBLD : | Not blocked |
| DNS4EU : | Blocked |
| Control D HaGeZi : | Not blocked |
| Firstseen: | 2022-09-24 04:43:04 UTC |
| Total malware sites : | 2 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 2 (100%) |
| A record(s) observed : | 11 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 09:45:20 | 104.21.2.8 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2025-04-27 09:45:20 | 172.67.186.200 | Not listed | AS13335 CLOUDFLARENET | n/a | no | |
| 2023-06-25 19:09:50 | 91.103.252.23 | racial-ladybug.aeza.network | SBL655618 | AS211522 HYPERCORELTD |  NL | no |
| 2023-03-30 12:31:55 | 94.142.138.11 | SBL655622 | AS211522 HYPERCORELTD |  FI | no | |
| 2023-03-16 21:41:37 | 82.115.223.199 | Not listed | AS214927 PSB-AS | NL | no | |
| 2023-02-12 16:30:34 | 31.47.0.165 | Not listed | AS202632 TXtv |  BA | no | |
| 2023-02-26 19:39:47 | 5.201.13.187 | Not listed | AS12324 LUBMAN-EDU-AS |  PL | no | |
| 2023-02-11 20:26:47 | 141.94.55.49 | Not listed | AS16276 OVH |  FR | no | |
| 2023-01-25 00:29:58 | 103.206.112.230 | Not listed | AS141303 DVRBS-AS |  IN | no | |
| 2023-02-03 12:10:06 | 162.55.107.157 | server.goodkeyshop.com | Not listed | AS24940 HETZNER-AS |  DE | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-10-25 13:58:18 | http://32589.clmonth.nyashteam.ru/lowLongpoll/6... | Offline | exe Formbook  |  jstrosch |
| 2022-09-24 04:43:08 | http://32589.clmonth.nyashteam.ru/lowLongpoll/c... | Offline | 32 dcrat exe |  zbetcheckin |
The table below shows recent payloads delivery by this host.